Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "170fdfb5-4f45-42ae-9ec2-ff010e9e51c6", "record_id": "flaws_cloudtrail:0000000:170fdfb5-4f45-42ae-9ec2-ff010e9e51c6", "row_index": 0, "timestamp": "2017-05-27T03:05:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "170fdfb5-4f45-42ae-9ec2-ff010e9e51c6", "eventTime": "2017-05-27T03:05:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA49FNGIQFA0UX6W0P", "expiration": "May 27, 2017 4:05:13 AM", "sessionToken": "FQoDYXdzECQaDM0hzA96ARW3Y80UHyLMAWOSCCPf+GxxtkpmyvygG5q4mBcg2agL3/ydOSTWkdx1zUnqCwYEPjJQJEolWDFwoRl37A6uKN8aGZnivQrcFHRAw6MxSTMpKAdt5UCf1lFgdolN75GAenrBLjYABiQ05aKWB5ZPHGU9a8kaxQMnoyNGmD9YsWyQPCOY78XTnIkgms8mqAmSE3j6QOeTUynBblqOjstN2Wty5uz3MAGz925k3/pJlCki9olnOCjFnL7FV2e0XBmCiYpSeWQ+3aklP+LImIsf1gikC9mB0ijp2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a0d4b71-4f70-4252-adb8-b1e53af59a65", "record_id": "flaws_cloudtrail:0000001:0a0d4b71-4f70-4252-adb8-b1e53af59a65", "row_index": 1, "timestamp": "2017-05-27T03:05:14Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA49FNGIQFA0UX6W0P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a0d4b71-4f70-4252-adb8-b1e53af59a65", "eventTime": "2017-05-27T03:05:14Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA49FNGIQFA0UX6W0P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "652d9a8d-dc14-42be-a174-cdda84695d", "record_id": "flaws_cloudtrail:0000002:652d9a8d-dc14-42be-a174-cdda84695d", "row_index": 2, "timestamp": "2017-05-27T03:05:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "652d9a8d-dc14-42be-a174-cdda84695d", "eventTime": "2017-05-27T03:05:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA27WUS1CH03QY8KVA", "expiration": "May 27, 2017 4:05:14 AM", "sessionToken": "FQoDYXdzECQaDLR4dSrACur1hxHImyLMAQUfVDnutCSnfwfOTsZyyzNOtkwCptWVGbPqO4fs1bCClVw/QRSZNmTNfB5pEUp9mddRTwRKuSitO7bovqnt3Re0bs1/qZBfgvI0l3fITz+C795a/Bu30q90bLGY4fCe3chPsK4d0AR3q2wWLRqGv5c/v+Jk0/v5ByUTWyz2nf0yNOpsxx5BW4gp1aQBguL+dy8oJma0Pehmqo42tIlnjmaOk+eRDbkPAyclmIUal6Y2XR/eGu+jr4afR9jzno8HJ0XtjMtRqbCpL0iVACjq2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6e4bb6c-6281-43a3-9277-dfdf54ef7199", "record_id": "flaws_cloudtrail:0000003:b6e4bb6c-6281-43a3-9277-dfdf54ef7199", "row_index": 3, "timestamp": "2017-05-27T03:05:15Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA27WUS1CH03QY8KVA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6e4bb6c-6281-43a3-9277-dfdf54ef7199", "eventTime": "2017-05-27T03:05:15Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA27WUS1CH03QY8KVA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18367e0-9ff4-4442-ad80-059d5983f8e9", "record_id": "flaws_cloudtrail:0000004:18367e0-9ff4-4442-ad80-059d5983f8e9", "row_index": 4, "timestamp": "2017-05-27T03:05:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18367e0-9ff4-4442-ad80-059d5983f8e9", "eventTime": "2017-05-27T03:05:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9Q02WQAFENIZPBN4", "expiration": "May 27, 2017 4:05:15 AM", "sessionToken": "FQoDYXdzECQaDELQzgqx+PnrVHhH9iLMATS+a9MJbqUrSsTYUfH7CPWNRgYBs2xmxZzl2XGHILulibwHr0CmxachTw08BUzk4PSJxUZvl52xT6sAn8Arnsc1kFb6Txh2WoCXZ2Iy2aaG4uYAUzaBOqyoIJ2p/40uh9BAq+7etK2rkXshapeVxzYpPIVqLGCi4Hq0tehCC5UOyBnlCLMj1CRy+vIoU5ZkE6QfgaXfUYLoMWq3v9mSxT1uAC92ivCvglKtnCNCp2Iq1p5iFL0vxhJfp/HrynJv0cJs1RGpJNbkM9O+nCjr2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756772-2574-4e38-8307-15c4232d8a88", "record_id": "flaws_cloudtrail:0000005:756772-2574-4e38-8307-15c4232d8a88", "row_index": 5, "timestamp": "2017-05-27T03:05:16Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9Q02WQAFENIZPBN4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756772-2574-4e38-8307-15c4232d8a88", "eventTime": "2017-05-27T03:05:16Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9Q02WQAFENIZPBN4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f15a54aa-432a-48f8-9450-5b2869ea820b", "record_id": "flaws_cloudtrail:0000006:f15a54aa-432a-48f8-9450-5b2869ea820b", "row_index": 6, "timestamp": "2017-05-27T03:05:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f15a54aa-432a-48f8-9450-5b2869ea820b", "eventTime": "2017-05-27T03:05:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOKLUV26YSMQDVZCI", "expiration": "May 27, 2017 4:05:16 AM", "sessionToken": "FQoDYXdzECQaDIB7+uW8AmkCLUtYKCLMAV7S51QbvQB2UXZyBnVvS9uzZ4gceQ0WDSkyJosS/PRnFqb4c6Smg8DJ6T7vlEC/6GU0oa2tfkDwF3QP11x3dqifd4xpmoFzS+oe/Ljr27faPAAiSsl3sD3AYD1LMQpbj55sPaxkPs0iVYsqyhdhiA/QZ1slfFKw61hRLTipC18+V5e5l8elm5+IvThHkbLY++5YawOFBPmdYpCvQ9PdfV5Flx0KJAx5yKNMr1rLe1GeXmMjyKN3bIUZXHyqtLig5D4WhtZp5GXo13oaXyjs2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a25a73-d03d-4c86-a5b1-5b7d865d538e", "record_id": "flaws_cloudtrail:0000007:90a25a73-d03d-4c86-a5b1-5b7d865d538e", "row_index": 7, "timestamp": "2017-05-27T03:05:17Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAOKLUV26YSMQDVZCI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a25a73-d03d-4c86-a5b1-5b7d865d538e", "eventTime": "2017-05-27T03:05:17Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAOKLUV26YSMQDVZCI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8951ce56-8264-48bb-a7d8-121b9cb19dee", "record_id": "flaws_cloudtrail:0000008:8951ce56-8264-48bb-a7d8-121b9cb19dee", "row_index": 8, "timestamp": "2017-05-27T03:05:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8951ce56-8264-48bb-a7d8-121b9cb19dee", "eventTime": "2017-05-27T03:05:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACM2ID3SPBC7XABVQ", "expiration": "May 27, 2017 4:05:17 AM", "sessionToken": "FQoDYXdzECQaDPYN3YC1zXjWoz+oVyLMAQuzfS3nZKV7qugbLz9jdilRm9Pxi6CVqRtIN0CyIn12GVQTMTdfHcYQxoS5x3dxpVWBQijz8MOhbv4tO7/Xb8RAIdxp4JZTx4Nb1tsHRLmm2vKky8YIQtwLN88YkQWytwfy724GInBnj5w05GrO9Lxf+wmCwHdL2evw/emDSAmR999qNhsF63lCBAlB4+gcaEWrlPpqKgUGRJB1VIi8ipW8Kmow7EfnVxEfDSg8jBTlbyJ0VWNL+h0EEycf6yojoUS0AhhvuhxpqbMsfCjt2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1a373706-1888-4451-ac7d-3b9755f07903", "record_id": "flaws_cloudtrail:0000009:e1a373706-1888-4451-ac7d-3b9755f07903", "row_index": 9, "timestamp": "2017-05-27T03:05:18Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACM2ID3SPBC7XABVQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1a373706-1888-4451-ac7d-3b9755f07903", "eventTime": "2017-05-27T03:05:18Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACM2ID3SPBC7XABVQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "931df66d-664b-4673-b708-82e47e4390b9", "record_id": "flaws_cloudtrail:0000010:931df66d-664b-4673-b708-82e47e4390b9", "row_index": 10, "timestamp": "2017-05-27T03:05:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "931df66d-664b-4673-b708-82e47e4390b9", "eventTime": "2017-05-27T03:05:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMBRO8ARK23PX71RH", "expiration": "May 27, 2017 4:05:18 AM", "sessionToken": "FQoDYXdzECQaDBsqCYWV5hbVOHueEiLMAQ8luAaqURb1iiIFADZnnfmn+RMNoDqxCohXi20FwYOzpu43x4uNVONPebdUw5Ps/dr6btVuVJlFb/oIvpfFqDRugM9nmo3Ja8nT/37kxChrFPE6tV/fIgY5Bs9pUbPEIqX402fei5IOEsjWClmDqkfOHW+NDdrLIofR61MBMQxkEhKrm/C5ClsY3S+5NRoPYG70R409ZSKy4uM5JfEf+oEeCGrxLIo/YlM7aUrLj8FPkJtpnb9i5cnXq3fE0/HIX+SxURVKQ/uhytUWeCju2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9ffee5-33b9-4554-8df6-5f6bb210d297", "record_id": "flaws_cloudtrail:0000011:8a9ffee5-33b9-4554-8df6-5f6bb210d297", "row_index": 11, "timestamp": "2017-05-27T03:05:19Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMBRO8ARK23PX71RH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9ffee5-33b9-4554-8df6-5f6bb210d297", "eventTime": "2017-05-27T03:05:19Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMBRO8ARK23PX71RH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af683a49-bf6c-41ff-a81b-7db9ab034eed", "record_id": "flaws_cloudtrail:0000012:af683a49-bf6c-41ff-a81b-7db9ab034eed", "row_index": 12, "timestamp": "2017-05-27T03:05:20Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAVXJEMRTWM1W5CXVH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af683a49-bf6c-41ff-a81b-7db9ab034eed", "eventTime": "2017-05-27T03:05:20Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAVXJEMRTWM1W5CXVH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496a265d-93a8-4f2f-ba38-0cc9bfe1b5b7", "record_id": "flaws_cloudtrail:0000013:496a265d-93a8-4f2f-ba38-0cc9bfe1b5b7", "row_index": 13, "timestamp": "2017-05-27T03:05:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496a265d-93a8-4f2f-ba38-0cc9bfe1b5b7", "eventTime": "2017-05-27T03:05:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVXJEMRTWM1W5CXVH", "expiration": "May 27, 2017 4:05:20 AM", "sessionToken": "FQoDYXdzECQaDADzl95MLo6A2i3gNSLMAWzQW1le7ZRuWZwBadBeZ2xJbkS2Uq23eZj5Y7GLUmgm1S3aOlDxDMyOyxQeGLLCJDmvmi6X54ADTOnFlVMsZYwGZhdQ/iyTRjkkaX5E56SrbI6ahuj40X37a2mo/FJ4cet8iI7cZmrCRi0ozgUKERn0xpdDvvAnbz0J3hEY0CJNuN/1niXHJvxJw7hmtUQGwCJINmFVjyOj1RzBGZv1GH3y08zD4SQ3FpU6bIyqvlHsIgK5tstteatqquZgvnBYVp+FIViIBmA3sQSdFyjw2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d47a4419-9efc-43b7-93fe-d138c2d25628", "record_id": "flaws_cloudtrail:0000014:d47a4419-9efc-43b7-93fe-d138c2d25628", "row_index": 14, "timestamp": "2017-05-27T03:05:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d47a4419-9efc-43b7-93fe-d138c2d25628", "eventTime": "2017-05-27T03:05:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO8F0HNGIWBUCUB7Z", "expiration": "May 27, 2017 4:05:21 AM", "sessionToken": "FQoDYXdzECQaDIx8z4toXDn7LwxHIyLMARWb3p5NBM80f88v4uvI/xXjL0MMQ/RTcyPLM1cHjn9+5sQFKMs89qbqfZHaVXdpx/CJKO2UoCEuNmFoqZpcGk41GNDlj7WPX9nQBKLUymvpSph3YpX5pAPz4glCpTx25f1ememH5GSZH390xsE16L8lqs5LsfflenxhS/Qhwme2ehZhzA4svxJRhmFUUqYGdeWYeVlpAYlzvH0bnDeWVoMtdp4o6dp+EzfmnmjfF31EXxvSo7OgNYRkUuNIzDHOZdOd2RQBWJLEWj2Mtyjx2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10885a-9183-47f4-bffe-5169131875ad", "record_id": "flaws_cloudtrail:0000015:10885a-9183-47f4-bffe-5169131875ad", "row_index": 15, "timestamp": "2017-05-27T03:05:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10885a-9183-47f4-bffe-5169131875ad", "eventTime": "2017-05-27T03:05:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC337UDV7FWW8DBNB", "expiration": "May 27, 2017 4:05:21 AM", "sessionToken": "FQoDYXdzECQaDKv3YKHdBNo4eO8NwCLMAV2v4kMarQZCuQPe8f1kq5xRd5s5tPqNWuooSTSP1uliira54RzOTx6dq+MFzulKYa4/oUIjItziHBRN3Bme7wJY9+asDJWkFQ7ZWvgUXmvP+fV3qIgDTrnOYH3M3jW/TGfT1iIR0UGSLBHOADlCSsF9Pyy+5kMKgib3yMxIXxUswZ7KlBMo4UoZ5W3sUUxnPmN7hg7bkmLaCNh9tQDrpmw8gmiWjlBh7FFQGughgFXiGCp33GGJoS3hHssM68ENUo7Wr3kb+mzjC1Uigyjx2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ef77c5-a2e4-4dc7-8d90-8bf84d7512a5", "record_id": "flaws_cloudtrail:0000016:03ef77c5-a2e4-4dc7-8d90-8bf84d7512a5", "row_index": 16, "timestamp": "2017-05-27T03:05:21Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC337UDV7FWW8DBNB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ef77c5-a2e4-4dc7-8d90-8bf84d7512a5", "eventTime": "2017-05-27T03:05:21Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC337UDV7FWW8DBNB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68883ba-9669-48dc-87ca-5300579e27d2", "record_id": "flaws_cloudtrail:0000017:68883ba-9669-48dc-87ca-5300579e27d2", "row_index": 17, "timestamp": "2017-05-27T03:05:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68883ba-9669-48dc-87ca-5300579e27d2", "eventTime": "2017-05-27T03:05:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARRJ2NPC3IM728RCZ", "expiration": "May 27, 2017 4:05:22 AM", "sessionToken": "FQoDYXdzECQaDJXwDrvPXnb7VFfUPSLMAUEPKIH9dF9/tJKRFyG0WLiAOP+Me2TbZrEzmJk0GUzX7nOHMtTVMRCjnmRVRLIY1yQtX0rwz+B6z4xcgUGbALUtvmv/6Y9CQ8jBlYeNH5/1RsoIGxtMJQ6IZiWGlQBt3xawBAu2zCeGqZ83gM5SCsXZZLoK/Xt+RdPWEBxDCV46hM9x8c7OFx7Ed1BzRFM5dvzZ2eW/xz6tNQG4maNrPpKZAUHbJYHmZO1szJvxSpz0DZfwlKYXRcYCu5ji/7qJ+D3qKYxzGZXe3ej5rSjy2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0487e6d-5a8d-48af-8f32-9ef1283a01c9", "record_id": "flaws_cloudtrail:0000018:c0487e6d-5a8d-48af-8f32-9ef1283a01c9", "row_index": 18, "timestamp": "2017-05-27T03:05:22Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO8F0HNGIWBUCUB7Z", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0487e6d-5a8d-48af-8f32-9ef1283a01c9", "eventTime": "2017-05-27T03:05:22Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO8F0HNGIWBUCUB7Z", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24847c5b-6ffb-4690-978c-bfbcfb3bd31f", "record_id": "flaws_cloudtrail:0000019:24847c5b-6ffb-4690-978c-bfbcfb3bd31f", "row_index": 19, "timestamp": "2017-05-27T03:05:22Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARRJ2NPC3IM728RCZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24847c5b-6ffb-4690-978c-bfbcfb3bd31f", "eventTime": "2017-05-27T03:05:22Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARRJ2NPC3IM728RCZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46635-3699-4cb4-bfa1-3b76b6dde6f0", "record_id": "flaws_cloudtrail:0000020:46635-3699-4cb4-bfa1-3b76b6dde6f0", "row_index": 20, "timestamp": "2017-05-27T03:05:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46635-3699-4cb4-bfa1-3b76b6dde6f0", "eventTime": "2017-05-27T03:05:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADZMFV872JDC5CLKQ", "expiration": "May 27, 2017 4:05:23 AM", "sessionToken": "FQoDYXdzECQaDLig9kgYAX9zBTugWSLMAbCJrkbbxIdtFxhR7x2JQZMJ/VuBMqyJlQ5Rj4XvdC1Fz9OgI3zypnLOhfYSUk1Kn9NNe2DalFS+aF5xI8I4v4X4iUasnlQhPfMXt4K5Yktf4HX9m0eVKIO4ZbCGTlnW7is6FXnMOHiuqPcGbhUSW4sgprjDXU1Q7hoElPkuBsnARHeUCvIlCtZs8u/g1ZFDHk/+fvHVKidmmECquM/N8k9q06/Ky0Rp7II84L7qnAR+TBgdxpV1OatJ0UC5ZhOhvfDjzsOdmW2czO+HTCjz2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "539467e8a-bda8-4b32-959d-a1fbe59e8ce8", "record_id": "flaws_cloudtrail:0000021:539467e8a-bda8-4b32-959d-a1fbe59e8ce8", "row_index": 21, "timestamp": "2017-05-27T03:05:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "539467e8a-bda8-4b32-959d-a1fbe59e8ce8", "eventTime": "2017-05-27T03:05:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA69P7KM5Y7NMQXQKB", "expiration": "May 27, 2017 4:05:23 AM", "sessionToken": "FQoDYXdzECQaDCVk/ie9zUJ2EbtwySLMAQQ3IS4A7E5Adz3yEHvN0c7eMFdeFYEa0qj4mmQ6VOYeGzDjGlRV1kN1qpEseKs12HQoU1RxhiJIOB3B6tZU17yHuIVPsSzCNfE1s2BVcn4J3mb8YWRX44e4NwrC14xWSaFTF7ifpBfs6qb3r7BlfzhjxQcgxCQQ1yYVbWNBeh0z81ZPEEY+lT4FI8VM8VLAQIIBsF2y77XHx1hjlchgN72tNNrQbjPa8rIY9Lr04ddOEw9sCA2G6C0HD/NBqrA8C9JkCYLS5+tkUIbH5yjz2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6d7ca8c-7905-4b1f-ac8f-d1d4a8d024cf", "record_id": "flaws_cloudtrail:0000022:a6d7ca8c-7905-4b1f-ac8f-d1d4a8d024cf", "row_index": 22, "timestamp": "2017-05-27T03:05:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6d7ca8c-7905-4b1f-ac8f-d1d4a8d024cf", "eventTime": "2017-05-27T03:05:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA67LFX4Z5Y7HEZVPS", "expiration": "May 27, 2017 4:05:24 AM", "sessionToken": "FQoDYXdzECQaDJMu5QzQVlMRMo/6CSLMAZjtqCHtyKwniFNrzdCKFzqzy11CDapi4Iq9UK/0kfhDgrkBJhXSQ02M3SXMRB5ZcSayqXHATkZfhz/YWtOfrVih3DKMuUCPaHFZyogYR4C5sETtDM9tWrlsrBI/9cvLKR757C1ZfVzZ65h0V5+pF+ExBgVn8jhx2BVWqEj1BN5omTdHhXATmOKZi9xsVRlCl3cZR/TTxu0HCCpsBj26eICkJKaDe9H9q3McyfZ4/bVn8R2uwAB7DZVC3ud+bgk2KwdSQbo99uLhbC35KCj02aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c499e1b-8036-4fef-bdab-e52b8bc94441", "record_id": "flaws_cloudtrail:0000023:0c499e1b-8036-4fef-bdab-e52b8bc94441", "row_index": 23, "timestamp": "2017-05-27T03:05:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c499e1b-8036-4fef-bdab-e52b8bc94441", "eventTime": "2017-05-27T03:05:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEUJ7MMA2YINXGPCY", "expiration": "May 27, 2017 4:05:25 AM", "sessionToken": "FQoDYXdzECQaDCnmSoCaHyCLRGKUxiLMAZjlJUsZ0F2mwl0Y9HbQawbb8NbQ97GNB7u0ZOC/57T0J9OODV++GPLMZ+Q2nuuFJ6s4+6IQKzRCpsoWvn06UABc16WRoulcAoQLNhnwNL8YQK1xbpaw90zVvO5d+5fe7963jSwK7otAGQhta9fzxYuitzAGp6ZWGN4yxFot7ogwNM64V26Gh/vYyTVZBL5T9iIHv9LDyeOSO63B57Qy5iwF0ySlJDBwYpr6kIvnds58NShTi4MGHaA6Nij2emuBouMxvclnrb3LFfoPESj12aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10aa42d-8145-432b-9725-31500c97c4b", "record_id": "flaws_cloudtrail:0000024:c10aa42d-8145-432b-9725-31500c97c4b", "row_index": 24, "timestamp": "2017-05-27T03:05:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10aa42d-8145-432b-9725-31500c97c4b", "eventTime": "2017-05-27T03:05:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASSBIXB25HT0UYEUV", "expiration": "May 27, 2017 4:05:26 AM", "sessionToken": "FQoDYXdzECQaDIQKPTdygkXQ6kyY+iLMAb31vsYYxSub8DtfwZjA+bUBMaN0unCagiU5GFV0OBnWXETxfbU8e5r3qd2rET6lOpOYzfPMmToVnNtKA/9zK27MpUQsn60z6FisQS/9Pxx9s8j7m5PUeiJV/kGmMel6aSiAIg+OiylO40Vdd5ZagyKA+Xi6xp3GlGpRym6scFQJydxv6ftZ/tRV+nlQxD9gdiUUv/88mFpWrUeJsgntYJSg4Vwjm2ykAIPqG6/cd9FNma1RNFErd0lZm7mCI/i3MZSGNiZzvZZ7svMfZSj22aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f997f8f7-6e56-4b18-8d50-aacb26a14a3a", "record_id": "flaws_cloudtrail:0000025:f997f8f7-6e56-4b18-8d50-aacb26a14a3a", "row_index": 25, "timestamp": "2017-05-27T03:05:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f997f8f7-6e56-4b18-8d50-aacb26a14a3a", "eventTime": "2017-05-27T03:05:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGNQBNKT566YATUFY", "expiration": "May 27, 2017 4:05:27 AM", "sessionToken": "FQoDYXdzECQaDFHPWjbsu+89qUuJDiLMAUEsLhG2/cz4oYJySn9xCP8bykRNq6+gD2zdlDP32KOS+hX3mqf2JKMIluIocHmwPoZu1qEo++jQxRAQZcFJUmVcJURpBy+lPVjWhMeTX9Ut05BTMpJeH22DaSLHaixmiwOp+kdHMxINq+O/4G6wanc80glozRCsK3F2mQlEGORtOx3LUs5QG/N0o2U97NQeZi3uJ9Rf8q+mZkwXaZcpjurB1emAXZO1prqCS+rnTl21JL4p7zSu8wHDbgFlU+ulDUQqEXMlebrdkVS0sSj32aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c96e687b-5ad8-446a-b257-5a709134b503", "record_id": "flaws_cloudtrail:0000026:c96e687b-5ad8-446a-b257-5a709134b503", "row_index": 26, "timestamp": "2017-05-27T03:05:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c96e687b-5ad8-446a-b257-5a709134b503", "eventTime": "2017-05-27T03:05:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEJ48VQM6AXS88PLK", "expiration": "May 27, 2017 4:05:29 AM", "sessionToken": "FQoDYXdzECQaDEEMUQ7awdxnlvCTmiLMARJvA8mUkWseBlUEpHG7X9TWVMRRbapHMUbOyuqOP1SPBHKyd7VK2y1u17GAiuJx0WhsOjhFO8ePBrpfLYLISVA4V2jVlmoXAU7/VgdIxydKtazMdC2ZoEQcDLcYwRktG5scGGY2Dbh08q5xhwr7ObcyaIyemhF6M+pZF7YQGyZFM2at21diMm8D+wQLsLTyioX/uL8C1dqAlsEk11ZnRWqiiK7kUirr/iw7WJtWZAvLBMsLI3RmOpmea5tUgZtGymr34HsI7dU7JNA61Cj52aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "838f243a-957c-449f-ae95-55f124093c950", "record_id": "flaws_cloudtrail:0000027:838f243a-957c-449f-ae95-55f124093c950", "row_index": 27, "timestamp": "2017-05-27T03:05:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "838f243a-957c-449f-ae95-55f124093c950", "eventTime": "2017-05-27T03:05:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALJ6N9UN7RHMBHHZF", "expiration": "May 27, 2017 4:05:30 AM", "sessionToken": "FQoDYXdzECQaDLWTdn7PCnlc+QgXvCLMAaWaN22hvv0Am5w+frd6rRyPL5guw21ktO1Mk0cuHd4fOHVL6G1qLRDLvV2as/zvktGDdbCjIUC9SJDppjB4kTCxbHc1D5B67oghD27SaUhhLiZ7606a1ksnnFLcwWJ+QQ428pbjpHdQcN9Jj6xXG3uz7iI86g22LyI1mmxiVb8kSS5EnDUDPm2bIh7qyo+6SfsAG66BXlTSaG4eBBqqyFkpiYRIKyuOh7DDA4RXR0LUFf9JN4XwnHaZ4+NDH1Et0aZM/eJbqF2rw9GwEyj62aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51aa38ca-6bfb-4675-bb23-615138d7fa09", "record_id": "flaws_cloudtrail:0000028:51aa38ca-6bfb-4675-bb23-615138d7fa09", "row_index": 28, "timestamp": "2017-05-27T03:05:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51aa38ca-6bfb-4675-bb23-615138d7fa09", "eventTime": "2017-05-27T03:05:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW3WEVV93D9U1I8N7", "expiration": "May 27, 2017 4:05:31 AM", "sessionToken": "FQoDYXdzECQaDFJpSIBe0e/DA7DVsyLMAdywdei45nFfAgQ5yU/U4rTze0L0/VeYprbeHM4WnZHhnVXUyUxjmry1Sz5ofwwBs422iZmqL0UymhW6OYXx5SOlJukWtO3DRKkjahafmJ1889ViH1XWxaPKEa0ThJe4YlddoJDLFxiG2DMQgnmrx9uouZLUY49kuidGms394InT3WwYWdUYeUAYC0wsrBaOl4IKG5DM7YAumzgjSCw0jL0WwtKNIiOCC8pNrUI37xZqZdoJOS3X2W85p2NzVsOY23PdnW3KFLILLQ2+Eyj72aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7edb346-c8b8-4bd9-907c-87450ee8b40e", "record_id": "flaws_cloudtrail:0000029:c7edb346-c8b8-4bd9-907c-87450ee8b40e", "row_index": 29, "timestamp": "2017-05-27T03:05:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7edb346-c8b8-4bd9-907c-87450ee8b40e", "eventTime": "2017-05-27T03:05:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASXWN6XUS49ZVP1D8", "expiration": "May 27, 2017 4:05:32 AM", "sessionToken": "FQoDYXdzECQaDBNpF0f+SxpwmTVtoiLMATjWH+eQCQoslVHQZvBlwdr7iNDnRP3AbKe9MYj62xw21KwViFxwPZirqfBb0Rah5N7eYJkG5wnJr61WVAgb+R0q+2tc38p47Qcq6ygeG6aPAcYVNC1PacfRlWRE5tdADhW6BUK19ar1sLctwXUAlSdtwvaJEqOLshIN4fNoHH9NwUj4O4KJcExaVSIihWcksayZj8OLPtBSYA8eTlgRcYPgL9IHG9FbHVl9jIsnVxvPtL9dr8Yhl/olCR9WtCe73FumrjMBho3CaBHu7Sj82aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b79bf8b4-e9d8-47a9-8920-2ee512b2311c", "record_id": "flaws_cloudtrail:0000030:b79bf8b4-e9d8-47a9-8920-2ee512b2311c", "row_index": 30, "timestamp": "2017-05-27T03:05:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b79bf8b4-e9d8-47a9-8920-2ee512b2311c", "eventTime": "2017-05-27T03:05:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1X0WSNMBS3QA0NP9", "expiration": "May 27, 2017 4:05:33 AM", "sessionToken": "FQoDYXdzECQaDJNo/TnseYaDcEsgmCLMAY/4Fy9jpLt7iVwml/0tEmruXp/9zn8TO/A3MOrcJ4FG1zWL/RIj2AD0It9IV0dYSArA3WiJmPx8NTmDSiKbI6Po+miCmzoZ7I+z+8me/zzcOX5QJbDYflzoOrc4cHYHdYtCxlbjjErvSmRQL/3I+GCcHR1J/0floES5XaKDUqHaYzvjNyx20qvnVUHKt99naFP+JRk7c3jUV0gJ2qa7XGms73N9I6Y11d/bRyCGZS2WQAl+GNo7ia3Ka0yZ9eZGc3cZVG0vI4zV6FIqfCj92aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2539a4c5-23d1-49bd-b719-74c652d78b51", "record_id": "flaws_cloudtrail:0000031:2539a4c5-23d1-49bd-b719-74c652d78b51", "row_index": 31, "timestamp": "2017-05-27T03:05:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2539a4c5-23d1-49bd-b719-74c652d78b51", "eventTime": "2017-05-27T03:05:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYZ9T23UZ1D90WIHQ", "expiration": "May 27, 2017 4:05:34 AM", "sessionToken": "FQoDYXdzECQaDObYdAm5zly5t0pJpyLMAXt5xOYKMXWJHi3USMhbPS6yYZwyenw5XHqdfz7CEK8rTVST8Z1yRiDyCSxuOEKqOxB0yRkTw8b331O3JWii51YKNra3wVGF9kfFdOxgo64JhM178JCtLo0kYrJTZNRilEdWPBr2nJbDRYFXfCup1Zh8L7lx5ksGUocWNptU9JUK3EAzmmjcnz9/KjWOqP+FED2a9iJ4Cli5LbKejNlEMh4gWMqRdtspotZcV9FT9E48qt4Co2tnPSRzS6xzwH2VsqdQBTtKntncsBbYQSj+2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4072a411-f00d-4054-ac64-46ead4dd1886", "record_id": "flaws_cloudtrail:0000032:4072a411-f00d-4054-ac64-46ead4dd1886", "row_index": 32, "timestamp": "2017-05-27T03:05:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4072a411-f00d-4054-ac64-46ead4dd1886", "eventTime": "2017-05-27T03:05:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAY65MW7ZIG9RS66TF", "expiration": "May 27, 2017 4:05:35 AM", "sessionToken": "FQoDYXdzECQaDOL3GGIJ0Y6R71CASyLMAWGXHBwpRdw9fEKd56X6sLT8CjEOcYta82ctiO/IlI+XW8HRqT1LW20P7CtZSSEz+9nCOozKa7eE/ohHxssSCPsSH4KjlFxQZmGpQHtXm+pIM6M7OALIUx5PzlS6y1WeIPwipNVDe9viB6OrMR2edP2MZYc69J0u+oGC8Icw4WCYLo7vpLjkRDy5GVH3Vw48IpfhiEglkuZGOpKjhLsCHFeYU+VrvkGkx7YzjeJbJMfpf26GUjOJNbKy36LbZjJ0JHp8TE2gu8GJCWA9ISj/2aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23eeb2b0-10f9-463e-b6e6-069adc2de0f8", "record_id": "flaws_cloudtrail:0000033:23eeb2b0-10f9-463e-b6e6-069adc2de0f8", "row_index": 33, "timestamp": "2017-05-27T03:05:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23eeb2b0-10f9-463e-b6e6-069adc2de0f8", "eventTime": "2017-05-27T03:05:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYB5GB9XXGIKZ0BLC", "expiration": "May 27, 2017 4:05:37 AM", "sessionToken": "FQoDYXdzECQaDLt0/uyqMIdKnh/wHCLMAZrCSLpNUorX3lXAi4qYCaC1I/mLJXQegcGizG9CzYf4Se2hRJDlpHvPUKDsiE8xn/Vd6+Zv1EVFHKQkOYib4/Sua1RvMltfYCLyTfFtML5a/tjs4684IgU9QC+CclbM7DK72s3QutocgzBb5OaKt54WHiR+0/AImNWGK/BFeqmtbsu+BRXoBhJqmnj22WG8agfaoFEv7z3FkvSRDDCQvYye54HYJlLLuXfcA3gUnJIO6Qwsx+euwtMTVWQFBUFjGbRM2XQsNrSFJw1KCCiB2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2617c3b0-eac6-488e-b8a4-ba6e591299f24", "record_id": "flaws_cloudtrail:0000034:2617c3b0-eac6-488e-b8a4-ba6e591299f24", "row_index": 34, "timestamp": "2017-05-27T03:05:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2617c3b0-eac6-488e-b8a4-ba6e591299f24", "eventTime": "2017-05-27T03:05:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA091KLIR41G0GXK9Y", "expiration": "May 27, 2017 4:05:38 AM", "sessionToken": "FQoDYXdzECQaDAQykCFmC3G1Wy7WXCLMAeV88ywglNp/O3DNv51V8ty4aFZJ7NpolfU713ekj2aMW2cHLvkaU1HVTb9aM19ZUY5AVflmgwzV15821paEULheW0U4w5pwXsUSKsqWU+8QO0eYJMeXG7Bx6HgsfyRruQfr47aYtajw0vGV8oGShZqCAV7dHyMyxQlyrsC/YAMNX3laUrhK5jn0CE7fTo+Ihc0ErCCc6YiZCz+JusnOYZvuatL5poBTJ7MgQzBQ6QCi/ifVpDDxwlmdBRRcGRkGiiLbNSwhFIVHdc2D7yiC2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d4cd8d4-fa97-410a-af57-d857c1f92d4d", "record_id": "flaws_cloudtrail:0000035:7d4cd8d4-fa97-410a-af57-d857c1f92d4d", "row_index": 35, "timestamp": "2017-05-27T03:05:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d4cd8d4-fa97-410a-af57-d857c1f92d4d", "eventTime": "2017-05-27T03:05:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA11VPMY0UAAH5ZHE1", "expiration": "May 27, 2017 4:05:39 AM", "sessionToken": "FQoDYXdzECQaDBSaOt4vdoBs47DbziLMATgxa0i0Mw70EueohwGTZl8J5yjbezJsL06H+U1aeRfsDh4UZLqjEBE6LKfWkA8wgI2jj4C6jl+zNuECYS6paqwsvqZiGYMhYXL9tbdvDhDHDWNwWon9DD9Cdvj/lSPc9b/27R+THnA2RvutbdpVzLWKMqS1FSVWDZi4E2AEJn/vfBG7bTCeF3YYAXguyCbGzjix8oIqdET5HsohJRRpsob4E+sV4fgeTUd0vbAknGIs5MjmQrfJKeZivvI4CBUB39vj19NRfu+SI94K5iiD2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ac399b-8500-4735-a0a8-ee96a006b89f", "record_id": "flaws_cloudtrail:0000036:76ac399b-8500-4735-a0a8-ee96a006b89f", "row_index": 36, "timestamp": "2017-05-27T03:05:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ac399b-8500-4735-a0a8-ee96a006b89f", "eventTime": "2017-05-27T03:05:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO7855J0INP7919FW", "expiration": "May 27, 2017 4:05:40 AM", "sessionToken": "FQoDYXdzECQaDHXVbs+jksDGZxz4qCLMAaAchWhdbVOXkPB6sDRdWguWwYGQhtu+sKykPaHvPpgIKN5aNtkXCBIxJvtZNYiej17n/n2m9YArx9LGfpJjofJFNlk/jBuQpFJ0eAXT0mWeNWnlCXD61RisgzJ65X3tJKWRL9raRGxEYrCqa1CbWjGRjWinCg5hunLFWLyk16g/t+qiLTfSz6Tr7XVhxAJBz14PT368qYPQu6AQY017ufBB6+YgFSlZZjhY7bI79wdccdmQH4XuE2aBK6pjiqCOV/SBZ6ciat+elDy1ciiE2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb350cec-5363-4f19-af3e-e35dba7a4953", "record_id": "flaws_cloudtrail:0000037:bb350cec-5363-4f19-af3e-e35dba7a4953", "row_index": 37, "timestamp": "2017-05-27T03:05:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb350cec-5363-4f19-af3e-e35dba7a4953", "eventTime": "2017-05-27T03:05:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3QNZZ3ATBXVMDE2I", "expiration": "May 27, 2017 4:05:41 AM", "sessionToken": "FQoDYXdzECQaDBfYbAO684s63D8OBSLMAUVjVyyGWcutdDND2A+nfTzvbpba+65wig4ArAkPMdrROjoItQH0Kux8tJwYGEj1PjimEHuOAU3qaNxBOPWMzc69ERoXMMqI8YE/mEjBp59hYvyx2W2UxPNNc/zeBGClROAW8lrPpPJGu/3TI1YH1rFI3LS9b8qphQWcArcky0fe7qZrPEpA2yojLBRev2IUNzKQwmkCHUt2xc3xX1NkfHxf2xwOkPgcVOiDtCPg/3tRNDqNpHsoGRuEP4D4xVvv1UJTi+O05DmYlMnueiiF2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "471749e-dbd5-46ac-9b37-30cc9f390eae", "record_id": "flaws_cloudtrail:0000038:471749e-dbd5-46ac-9b37-30cc9f390eae", "row_index": 38, "timestamp": "2017-05-27T03:05:42Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3QNZZ3ATBXVMDE2I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "471749e-dbd5-46ac-9b37-30cc9f390eae", "eventTime": "2017-05-27T03:05:42Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3QNZZ3ATBXVMDE2I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5ff05e-5160-4314-b77e-2744fd6948ce", "record_id": "flaws_cloudtrail:0000039:5b5ff05e-5160-4314-b77e-2744fd6948ce", "row_index": 39, "timestamp": "2017-05-27T03:05:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5ff05e-5160-4314-b77e-2744fd6948ce", "eventTime": "2017-05-27T03:05:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3IIV2352DCJF4F29", "expiration": "May 27, 2017 4:05:42 AM", "sessionToken": "FQoDYXdzECQaDIpzplZvpRq7ittv6iLMAQ0NnD9H+kSyNaNHH5tIM7d+kuBH2dpePJQIfflmb7SZPYhojiQ9GFe6N6Rk5OA37gJLpifClx33MtJyRsCn/wTl+2Kf0j8fiPG1ebZLkbka+7THXOFEffKtpix+4Ul3bLRR68BIf6vHSgmKLjwSoi0LpJFznNlzia61gdgLMObYQLNoXw7+DNHfsITdx2w0BOmFNEgYXAcRhBBo9kd2tpdVy4a1KCRKw3ny3XePNsBq23q5ulMt9jZJP1oFS+cBge7IRENfFczFSaMByiiG2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49253b8-71c4-4884-9c4f-d3480e824db8", "record_id": "flaws_cloudtrail:0000040:49253b8-71c4-4884-9c4f-d3480e824db8", "row_index": 40, "timestamp": "2017-05-27T03:05:43Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3IIV2352DCJF4F29", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49253b8-71c4-4884-9c4f-d3480e824db8", "eventTime": "2017-05-27T03:05:43Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3IIV2352DCJF4F29", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "537cf041-f823-40eb-9f9d-74ca48d5b3c2", "record_id": "flaws_cloudtrail:0000041:537cf041-f823-40eb-9f9d-74ca48d5b3c2", "row_index": 41, "timestamp": "2017-05-27T03:05:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "537cf041-f823-40eb-9f9d-74ca48d5b3c2", "eventTime": "2017-05-27T03:05:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPGX9W6M9W4NCUB28", "expiration": "May 27, 2017 4:05:44 AM", "sessionToken": "FQoDYXdzECQaDGpGtIzrP3zNXiQ5qyLMAfs7Lo9JphnqH48feIIWcjNCpzjM8QcrcAjs6qeHEP4mVG4Vsqz+GOBlU3r1KvdwXZSweSl6nATrLSUsKmoI2HTYcar8/5hDpw3tiWCATlHuEIsLOvGfIci2I0cwWgCnBmRDIWP6cNYFcfiMhqjNEO83oI52tNIyOYeL0R/QaXA0kk7CqDnoH46hRHRdx776QIa3bYcQgSW5HtEw5zEKKDfNSzTsXyNweZPNfZYkwvn9V5OBZRH/fXhHQ154UqoWiA58hicWK62bjCE/jyiI2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "577e913b-e4f3-40a4-8d89-b1bc60d1f119", "record_id": "flaws_cloudtrail:0000042:577e913b-e4f3-40a4-8d89-b1bc60d1f119", "row_index": 42, "timestamp": "2017-05-27T03:05:45Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPGX9W6M9W4NCUB28", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "577e913b-e4f3-40a4-8d89-b1bc60d1f119", "eventTime": "2017-05-27T03:05:45Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPGX9W6M9W4NCUB28", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a418e1e-12c5-42d2-b377-e77fe5c2a096", "record_id": "flaws_cloudtrail:0000043:4a418e1e-12c5-42d2-b377-e77fe5c2a096", "row_index": 43, "timestamp": "2017-05-27T03:05:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a418e1e-12c5-42d2-b377-e77fe5c2a096", "eventTime": "2017-05-27T03:05:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK6XCQN1FHL7QC20T", "expiration": "May 27, 2017 4:05:45 AM", "sessionToken": "FQoDYXdzECQaDFZVyvMH3VUemBmf9CLMAX7Tq+62rB89T0dtL21xBLTAUy/XH4CjMHgjNrCREZipwOWSFSoiXCVHbp4EJWJ+LqNXVp08TBw8wUGOXYUHRvJzFVCw6eMfE0hUwIKr+s5DYttkiUZ3kYJL3vPkxetxXEe6xGwlFv82FkaW5xpohcgQFTUhwjtTeHRBUWgjDKNsRV4AJqiyg1RRXs1juTjzZFpAnPQ6+eCFP8GGK3QFPpC1zi3HOYSueEADtof8/+CWmYJ6/L0d1424JaCJSBBzf8U7vUKRmvuIrpnp5CiJ2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47dced7c-c288-4243-9cca-9338c9afae97", "record_id": "flaws_cloudtrail:0000044:47dced7c-c288-4243-9cca-9338c9afae97", "row_index": 44, "timestamp": "2017-05-27T03:05:47Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK6XCQN1FHL7QC20T", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47dced7c-c288-4243-9cca-9338c9afae97", "eventTime": "2017-05-27T03:05:47Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK6XCQN1FHL7QC20T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f7c706-0080-4466-8446-a30034ea", "record_id": "flaws_cloudtrail:0000045:28f7c706-0080-4466-8446-a30034ea", "row_index": 45, "timestamp": "2017-05-27T03:05:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f7c706-0080-4466-8446-a30034ea", "eventTime": "2017-05-27T03:05:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASBCJ4RUBWGUKWDBL", "expiration": "May 27, 2017 4:05:47 AM", "sessionToken": "FQoDYXdzECQaDOKvkmvCppRCWICreCLMATSKpW+Z2KIJI99e2ZrTY7hL88nkeYp4rm1bEHUmdiS7+7ObR7ssIPJ76CspSNVkjGsBoq3qwTTgauBbfxJoBfGhJCPGXQrRbuTaBKVRjNfQqoFbTOer+k4tsP1X2lPDc66sgnUQDame26Z+sfrYQ0j44/mD9nmajH/DEPJEZKdKxmEl7UiW5RwPPjkPVrLoNoy5qjUjGswQBYoBK5SG6Bb4s90BQYuS72fLVxbsT1t0b7bUh3Ez4Dw5+Fi80OrK89+DLuFCKSUSWMaM7CiL2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5876cba5-a6e0-47ff-9164-577149cfc971", "record_id": "flaws_cloudtrail:0000046:5876cba5-a6e0-47ff-9164-577149cfc971", "row_index": 46, "timestamp": "2017-05-27T03:05:48Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASBCJ4RUBWGUKWDBL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5876cba5-a6e0-47ff-9164-577149cfc971", "eventTime": "2017-05-27T03:05:48Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASBCJ4RUBWGUKWDBL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7ee9e77-9bfa-4d9b-afdd-e8ff8d794a66", "record_id": "flaws_cloudtrail:0000047:d7ee9e77-9bfa-4d9b-afdd-e8ff8d794a66", "row_index": 47, "timestamp": "2017-05-27T03:05:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7ee9e77-9bfa-4d9b-afdd-e8ff8d794a66", "eventTime": "2017-05-27T03:05:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2NXK60D44ERDMOC2", "expiration": "May 27, 2017 4:05:48 AM", "sessionToken": "FQoDYXdzECQaDPKRt2aMGd8q+f8tYiLMAVW8H71X3K4RLOALSXvVDLk2/v+yunyMvdylI2ecQznGVdYunDTKcbkG79x59AW32D+SVkGOYIT9spyTdd7ETB0NJX3bQfWwAa4LAB4MiSXEB4kduZYEsdbaSrUlsQviwOSmFYsc9IJ4uZH7SVMu7KgaLGW81yBVG5NXmDdT/rHMOw49OxZmhhBrCa2A8IrLHpPyeS6slwxSCLErdIGvZDMkTS3MESxsZXiCsep1rEJ1UfLEzv7stsHrmpKTbjhnKya1dYYUaNOj0cks+yiM2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f949304-6f11-4186-a19d-a7bae5712940", "record_id": "flaws_cloudtrail:0000048:d7f949304-6f11-4186-a19d-a7bae5712940", "row_index": 48, "timestamp": "2017-05-27T03:05:49Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2NXK60D44ERDMOC2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f949304-6f11-4186-a19d-a7bae5712940", "eventTime": "2017-05-27T03:05:49Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2NXK60D44ERDMOC2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "facd969a-b3c3-4b14-9237-3af095374f462", "record_id": "flaws_cloudtrail:0000049:facd969a-b3c3-4b14-9237-3af095374f462", "row_index": 49, "timestamp": "2017-05-27T03:05:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "facd969a-b3c3-4b14-9237-3af095374f462", "eventTime": "2017-05-27T03:05:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUAENR40F9I1A5WHP", "expiration": "May 27, 2017 4:05:49 AM", "sessionToken": "FQoDYXdzECQaDMmPwK6pWJWCYRF6fCLMAYjcvt3aatmoQbTaIaJX1hyuKztVR0vzlR4fq86wtP9nKI0adpRSsaOUc8Yyp+hyB2pZ/UV6KT+q3M4VJwizUou55RfI+dykU+aDLd52EMlXXvJq0ypFIS8eNmyexqGPAlI0HdFL9GHGmRurYS4F1Ojb1ntZMZGS8VWsmGNt4berQzYcjr0W/aZMTy1d3cg79W5QhvkZgIqGuNWKzTAIKUWL/CxJMH6aPwsekva0XGvSaNU6K4GIm54xaFtEWL9eyIFwrtt33nhjDncaaCiN2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef533ebd-a6eb-410d-9d6d-726a6fe3a10e", "record_id": "flaws_cloudtrail:0000050:ef533ebd-a6eb-410d-9d6d-726a6fe3a10e", "row_index": 50, "timestamp": "2017-05-27T03:05:50Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUAENR40F9I1A5WHP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef533ebd-a6eb-410d-9d6d-726a6fe3a10e", "eventTime": "2017-05-27T03:05:50Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUAENR40F9I1A5WHP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3fbc1b3-6b86-4dd4-8f03-5d44c844355ef", "record_id": "flaws_cloudtrail:0000051:f3fbc1b3-6b86-4dd4-8f03-5d44c844355ef", "row_index": 51, "timestamp": "2017-05-27T03:05:51Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK2M69Z4OHA10M8RL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3fbc1b3-6b86-4dd4-8f03-5d44c844355ef", "eventTime": "2017-05-27T03:05:51Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK2M69Z4OHA10M8RL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fae374b4-fb1a-424a-8dc3-06ee8a02ef2b", "record_id": "flaws_cloudtrail:0000052:fae374b4-fb1a-424a-8dc3-06ee8a02ef2b", "row_index": 52, "timestamp": "2017-05-27T03:05:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fae374b4-fb1a-424a-8dc3-06ee8a02ef2b", "eventTime": "2017-05-27T03:05:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK2M69Z4OHA10M8RL", "expiration": "May 27, 2017 4:05:51 AM", "sessionToken": "FQoDYXdzECQaDMy0aJFtQvSA2ubqFiLMAXS0+lJeKjPs12mokB0grg9zqC2FZbpFC0CqkQNN8z6yauieWyzaeQuIGTPG7vKT73e50MprB/EnuUApiBoSuvB11RkJbCZ4s4cjwbepmlY4B5zMieBOoIhCebw9FZOV8JceogL3yWFrxT69PoLn7OkganLS9d7XDuRvUA6n1XGFUtl1e0Yfrs3V4iyN9FOI7DjeKTZQAyFwWE8k80zgrbKPVLotZbXDzaXuzaz9rnBTks2xayQrZFnBfaht72sxxugB2FeUTmI4mDAMNCiP2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd9b39ef-cac1-409e-8891-a824a3d1915a", "record_id": "flaws_cloudtrail:0000053:dd9b39ef-cac1-409e-8891-a824a3d1915a", "row_index": 53, "timestamp": "2017-05-27T03:05:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd9b39ef-cac1-409e-8891-a824a3d1915a", "eventTime": "2017-05-27T03:05:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAMFS4LK6IKVI603P", "expiration": "May 27, 2017 4:05:52 AM", "sessionToken": "FQoDYXdzECQaDIo7myzGCyzt7dznhiLMAa9pZl7ACfMrVb0ggHWugOJYO01iDfbxFz+VQ86vyXDDVvIaR01d6AiDGwS0PZYCQjiiARQnm6fOkyHRvlMDzlrGul19zpGmid9pT48MQGb1aXdwvU1kfiJb7wtBDQc0/sp/4IdTRBfz22cloy46SQv0n74imAAmJi5twX1as6eFZ2JG+fOMQppJnkIYK0e17LWwuHSgOOd0mmmrLHICxOiW0Ke4DxyhPRU4bqeCQHnzOgY8ioAzjtqEA2ptpJ/JICTa760fhiaHR8ngeSiQ2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9917a78-f5fc-414f-af33-a1c637ea7380", "record_id": "flaws_cloudtrail:0000054:e9917a78-f5fc-414f-af33-a1c637ea7380", "row_index": 54, "timestamp": "2017-05-27T03:05:53Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAMFS4LK6IKVI603P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9917a78-f5fc-414f-af33-a1c637ea7380", "eventTime": "2017-05-27T03:05:53Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAMFS4LK6IKVI603P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2609db97-e87a-47bb-8aa3-fad0b16b373d", "record_id": "flaws_cloudtrail:0000055:2609db97-e87a-47bb-8aa3-fad0b16b373d", "row_index": 55, "timestamp": "2017-05-27T03:05:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2609db97-e87a-47bb-8aa3-fad0b16b373d", "eventTime": "2017-05-27T03:05:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASPG2T16IRNCEUBB6", "expiration": "May 27, 2017 4:05:53 AM", "sessionToken": "FQoDYXdzECQaDLVA2Y7gfvacwVUtWCLMAZmtHl6fAOOwfkSYLtpF9zFOyOzETKcgHIU2mPHJemqszAv+MbQS0DWUI5ALQM2PTYeUsnLPaS35iBR/np32J6lowejPzhs4pNRVzdY9nwgTVBqyC40Ktl9Mo4yumWi6h5ttBprgqjfUXEZ3KGJ3pemccOLGDDUUQMsa5UnXA1KUzysBk7QE91L/e05ijygRLdW6kTyoovfWp23pRXSklLuZXn1xZRhNLyQTNYOIh6sK6n1FocajAV0IfaQhYsi5PiP3lvXTG51avIhJSyiR2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cf95bf4-5f92-4bb7-94ea-a480851eccfd", "record_id": "flaws_cloudtrail:0000056:7cf95bf4-5f92-4bb7-94ea-a480851eccfd", "row_index": 56, "timestamp": "2017-05-27T03:05:54Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASPG2T16IRNCEUBB6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cf95bf4-5f92-4bb7-94ea-a480851eccfd", "eventTime": "2017-05-27T03:05:54Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASPG2T16IRNCEUBB6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c64af37-7030-42b5-8873-db5f1bfbe20a", "record_id": "flaws_cloudtrail:0000057:3c64af37-7030-42b5-8873-db5f1bfbe20a", "row_index": 57, "timestamp": "2017-05-27T03:05:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c64af37-7030-42b5-8873-db5f1bfbe20a", "eventTime": "2017-05-27T03:05:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFGXX8BTY5KV6425X", "expiration": "May 27, 2017 4:05:54 AM", "sessionToken": "FQoDYXdzECQaDB+NpFjwEgeAjeUwhiLMAfqRGlGdW6Yo0Z+GFUbjrW90kCCJcQCa+6gMdxKLACA7gSRqSDRlJo7ONJ5iT4wS3/Whd6ejiWxQLT9kAxpaJNyJDFTv9EWr3jtO2dV3i/JbjyhoivhTMMj/lI+M4ekQDWRrrw2dUwzVV/tzHURuNGRfZlEcoCgFJuWHdn09P9u34wIP9CQgHdpprAKMzR9NltgfAOrCDu0ZlKimdzd4L1O2z6Pz6MZ7LRLdt5umXUc7nhfzF21N8tk5RY+i/aMvSlGymMaJ1+DxverG9SiS2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171a8314-1df9-4467-bf81-363d933cfafa", "record_id": "flaws_cloudtrail:0000058:171a8314-1df9-4467-bf81-363d933cfafa", "row_index": 58, "timestamp": "2017-05-27T03:05:55Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFGXX8BTY5KV6425X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171a8314-1df9-4467-bf81-363d933cfafa", "eventTime": "2017-05-27T03:05:55Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFGXX8BTY5KV6425X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186ec3f9-ec9d-4112-89ff-19c9528a068e", "record_id": "flaws_cloudtrail:0000059:186ec3f9-ec9d-4112-89ff-19c9528a068e", "row_index": 59, "timestamp": "2017-05-27T03:05:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186ec3f9-ec9d-4112-89ff-19c9528a068e", "eventTime": "2017-05-27T03:05:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXYNPWPCZMSTDBNT8", "expiration": "May 27, 2017 4:05:55 AM", "sessionToken": "FQoDYXdzECQaDKw46MFP1jc9tAlnoyLMASkJEg/QeoKaA/NVHG27r60vjwWBHKpn8KIl/i1uchqQpe/cVJ2c45rXaV6lAC4Zs1MLx3E4XvU0gmUzMZbJZDZzahWJORFXNVW9RM4caxTJXZ0TFmY8NcxYcF3cfmfj6qF6GR2Kd5B6WTQIyB7vcuwvN7KkhVSCkK/yBTCasWQrUfOuF3DZ/9kHG1Mtqa32qLw1QVznE9vGpU1puin5ImPJyHYn3TMZDf7RC4tdhsq5lU1NV8horTUKoLL2wfWTTFmfPxiz8b2e44RqvCiT2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8e95c20-98e4-486f-9229-3892aac8a42b", "record_id": "flaws_cloudtrail:0000060:b8e95c20-98e4-486f-9229-3892aac8a42b", "row_index": 60, "timestamp": "2017-05-27T03:05:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8e95c20-98e4-486f-9229-3892aac8a42b", "eventTime": "2017-05-27T03:05:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPP7AHO28RTD5UVEG", "expiration": "May 27, 2017 4:05:56 AM", "sessionToken": "FQoDYXdzECQaDBhiHhmmAvgCZDW/uSLMAeNUyNM8GZO45RmJH/bkLf2c8CVdmhy/A3jrfxmi495BPbW76FA+dYm936sy3T0O10Ch1x82R11s1AMv9v7X3jV3HmqCUiYIgKAtKFIWGS6xj+abziWIoSoRDjl9Cmr4hP0H/1yxmHm51l5xvdaUvSsKTlGTFeo3KDOoF44+LnXcrTZwJwJd/obVUo+vGDkvCkgYUqf7WPYHRKky2E2eLV+tYsziRodUcB6vTu7Wbv77OrqU56X8A0PQOneHxi+Spga1pRamo84DM91D7CiU2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2288b76-577b-42e9-82c9-bd05bec8280c", "record_id": "flaws_cloudtrail:0000061:a2288b76-577b-42e9-82c9-bd05bec8280c", "row_index": 61, "timestamp": "2017-05-27T03:05:56Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXYNPWPCZMSTDBNT8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2288b76-577b-42e9-82c9-bd05bec8280c", "eventTime": "2017-05-27T03:05:56Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXYNPWPCZMSTDBNT8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab3dfd9-9545-43e3-a64e-bd86ff38114a", "record_id": "flaws_cloudtrail:0000062:dab3dfd9-9545-43e3-a64e-bd86ff38114a", "row_index": 62, "timestamp": "2017-05-27T03:05:56Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPP7AHO28RTD5UVEG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab3dfd9-9545-43e3-a64e-bd86ff38114a", "eventTime": "2017-05-27T03:05:56Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPP7AHO28RTD5UVEG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1c0b024-eb2f-43f9-8bba-ce5da64a5df3", "record_id": "flaws_cloudtrail:0000063:d1c0b024-eb2f-43f9-8bba-ce5da64a5df3", "row_index": 63, "timestamp": "2017-05-27T03:05:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1c0b024-eb2f-43f9-8bba-ce5da64a5df3", "eventTime": "2017-05-27T03:05:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN8KV24OVINEHM0EW", "expiration": "May 27, 2017 4:05:57 AM", "sessionToken": "FQoDYXdzECQaDHwQEuWe1pfCGRs2qSLMAY3gIlfQa0bGExqH9J8MwGb8yJhninNtGZ8QfZw8JPn3e0VC8Ydh0g3SNmkSQt1ZuFmLBUSdr2IdxJ5SYy80ZLCz3VpgArpknB8aJHUGEw2ujLC9JG9RiRxby1mosNxH4aHD8LroKWO3BldlESWyV5662+8pUiuEHJPV0fnBGqUshVIrfjXVclq4bK2zKxDd6Yf5/21OoIUwTdog5y/WNzOmP2gudQYFUCFzwHeHsoK7hLt8nV+1U2mdBQ/jFZ+FyXVA6x85COiK8t0gdCiV2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32e997c-9b50-4754-bbf0-a283be475030e", "record_id": "flaws_cloudtrail:0000064:b32e997c-9b50-4754-bbf0-a283be475030e", "row_index": 64, "timestamp": "2017-05-27T03:05:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32e997c-9b50-4754-bbf0-a283be475030e", "eventTime": "2017-05-27T03:05:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIVIL0E3B7JSTURQB", "expiration": "May 27, 2017 4:05:57 AM", "sessionToken": "FQoDYXdzECQaDOp2uRjyEiht/PtTjiLMAVCxJWGb+hH/txspX5BJ94qqXZhBy2ZGgpwYZt9OUSPF4yCamy16gAdLlHg/ub/DL32iubR0YO9C8PmqjjnwNn6s8UC//95ADrztrGao+m+ew9zj0/AcSf+Erw67HbONRT0YQ98gwCAtzS3mdJz3YHXm0ku4QHDPrxFgsa2RNfwTyv5aA4EEaOCm2ccuSh6LRygsQUf4/J8b9cUjyNZaEkCyE52/Q22TgKrLW9jQ0AFbSaL679YlM1OHW8btGKp2381YGAVSMsSI7zdlgiiV2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7630a1a-4e2a-4260-b18c-906d791adcb5", "record_id": "flaws_cloudtrail:0000065:a7630a1a-4e2a-4260-b18c-906d791adcb5", "row_index": 65, "timestamp": "2017-05-27T03:05:57Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIVIL0E3B7JSTURQB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7630a1a-4e2a-4260-b18c-906d791adcb5", "eventTime": "2017-05-27T03:05:57Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIVIL0E3B7JSTURQB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc913f4b-63d1-4e72-9256-fce07cd163a2", "record_id": "flaws_cloudtrail:0000066:dc913f4b-63d1-4e72-9256-fce07cd163a2", "row_index": 66, "timestamp": "2017-05-27T03:05:59Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc913f4b-63d1-4e72-9256-fce07cd163a2", "eventTime": "2017-05-27T03:05:59Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82bed74d-c2b6-488b-b9c6-d544dc6218fb", "record_id": "flaws_cloudtrail:0000067:82bed74d-c2b6-488b-b9c6-d544dc6218fb", "row_index": 67, "timestamp": "2017-05-27T03:06:00Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82bed74d-c2b6-488b-b9c6-d544dc6218fb", "eventTime": "2017-05-27T03:06:00Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f1f252e-cb60-4690-a74e-cecfd667ef43", "record_id": "flaws_cloudtrail:0000068:8f1f252e-cb60-4690-a74e-cecfd667ef43", "row_index": 68, "timestamp": "2017-05-27T03:06:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f1f252e-cb60-4690-a74e-cecfd667ef43", "eventTime": "2017-05-27T03:06:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56da122-01fc-4b6f-8eb8-b042ced355e3", "record_id": "flaws_cloudtrail:0000069:c56da122-01fc-4b6f-8eb8-b042ced355e3", "row_index": 69, "timestamp": "2017-05-27T03:06:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56da122-01fc-4b6f-8eb8-b042ced355e3", "eventTime": "2017-05-27T03:06:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae563eae-1882-4a36-8d1f-0eb076f4ce0b", "record_id": "flaws_cloudtrail:0000070:ae563eae-1882-4a36-8d1f-0eb076f4ce0b", "row_index": 70, "timestamp": "2017-05-27T03:06:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae563eae-1882-4a36-8d1f-0eb076f4ce0b", "eventTime": "2017-05-27T03:06:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d21ecaa1-a146-47f6-b5eb-f7a8c75ca673", "record_id": "flaws_cloudtrail:0000071:d21ecaa1-a146-47f6-b5eb-f7a8c75ca673", "row_index": 71, "timestamp": "2017-05-27T03:06:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d21ecaa1-a146-47f6-b5eb-f7a8c75ca673", "eventTime": "2017-05-27T03:06:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf5ce1f-43ea-4f11-87a7-d3d4f03916", "record_id": "flaws_cloudtrail:0000072:6bf5ce1f-43ea-4f11-87a7-d3d4f03916", "row_index": 72, "timestamp": "2017-05-27T03:06:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf5ce1f-43ea-4f11-87a7-d3d4f03916", "eventTime": "2017-05-27T03:06:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf098ebe-a390-4daf-a500-8ad7a21da60f", "record_id": "flaws_cloudtrail:0000073:bf098ebe-a390-4daf-a500-8ad7a21da60f", "row_index": 73, "timestamp": "2017-05-27T03:06:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf098ebe-a390-4daf-a500-8ad7a21da60f", "eventTime": "2017-05-27T03:06:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cd153aa-d79f-4d67-bc81-42e1c3d0eea6", "record_id": "flaws_cloudtrail:0000074:1cd153aa-d79f-4d67-bc81-42e1c3d0eea6", "row_index": 74, "timestamp": "2017-05-27T03:06:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cd153aa-d79f-4d67-bc81-42e1c3d0eea6", "eventTime": "2017-05-27T03:06:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd432000-4f64-4c29-b507-a600871f8687a", "record_id": "flaws_cloudtrail:0000075:5bd432000-4f64-4c29-b507-a600871f8687a", "row_index": 75, "timestamp": "2017-05-27T03:06:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd432000-4f64-4c29-b507-a600871f8687a", "eventTime": "2017-05-27T03:06:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60ee3f43-ab0a-411a-bafd-5036b5af7f09", "record_id": "flaws_cloudtrail:0000076:60ee3f43-ab0a-411a-bafd-5036b5af7f09", "row_index": 76, "timestamp": "2017-05-27T03:06:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60ee3f43-ab0a-411a-bafd-5036b5af7f09", "eventTime": "2017-05-27T03:06:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b19611-789a-47f6-89f2-e98fb0b08cda", "record_id": "flaws_cloudtrail:0000077:2b19611-789a-47f6-89f2-e98fb0b08cda", "row_index": 77, "timestamp": "2017-05-27T03:06:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b19611-789a-47f6-89f2-e98fb0b08cda", "eventTime": "2017-05-27T03:06:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38bd2585-d88a-40e7-b546-50cc3e87adf9", "record_id": "flaws_cloudtrail:0000078:38bd2585-d88a-40e7-b546-50cc3e87adf9", "row_index": 78, "timestamp": "2017-05-27T03:06:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38bd2585-d88a-40e7-b546-50cc3e87adf9", "eventTime": "2017-05-27T03:06:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36442d-fb2c-4937-bed9-be1e8595bae1", "record_id": "flaws_cloudtrail:0000079:36442d-fb2c-4937-bed9-be1e8595bae1", "row_index": 79, "timestamp": "2017-05-27T03:06:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36442d-fb2c-4937-bed9-be1e8595bae1", "eventTime": "2017-05-27T03:06:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8AWAROKML9NWSYM0", "expiration": "May 27, 2017 4:06:10 AM", "sessionToken": "FQoDYXdzECQaDNxrNjnuRptuxa1+NSLMAba8Jxeo63cCy2dcbmHo5LOOOMh/PGOBlFj7lBcUPuu6EMtIUHVoPg4t7IoLe8HOdOXV9jAtcxIDp11VG3ZbbVfJJPKLbPF0kyKup83ICwWB9rUnPsjES4HfYjhFk4ov87fGnANkVfOCcDW+0+6/DONqPGFXGr6K4y6h0E7N0uzShwbrJeE/Mr2cDqohPhqclB95NMJup/4UL7Iod0R2l0WrnvIxXxA2OL+aQfQuLITQscZ85CFviLpJpVhBT/LsGCM08BKVEFbnkygfByii2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1321afe-f5cc-4f6e-8542-7327dbc416bb", "record_id": "flaws_cloudtrail:0000080:d1321afe-f5cc-4f6e-8542-7327dbc416bb", "row_index": 80, "timestamp": "2017-05-27T03:06:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN8KV24OVINEHM0EW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1321afe-f5cc-4f6e-8542-7327dbc416bb", "eventTime": "2017-05-27T03:06:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN8KV24OVINEHM0EW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c48ce23-03a0-40ae-8673-8345a4ce61ad", "record_id": "flaws_cloudtrail:0000081:3c48ce23-03a0-40ae-8673-8345a4ce61ad", "row_index": 81, "timestamp": "2017-05-27T03:06:11Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c48ce23-03a0-40ae-8673-8345a4ce61ad", "eventTime": "2017-05-27T03:06:11Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "844c7893-1365-426a-9f39-0058f92cf32d", "record_id": "flaws_cloudtrail:0000082:844c7893-1365-426a-9f39-0058f92cf32d", "row_index": 82, "timestamp": "2017-05-27T03:06:12Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "844c7893-1365-426a-9f39-0058f92cf32d", "eventTime": "2017-05-27T03:06:12Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20b04dea-9d92-4ffe-acc5-ce3950c4d493", "record_id": "flaws_cloudtrail:0000083:20b04dea-9d92-4ffe-acc5-ce3950c4d493", "row_index": 83, "timestamp": "2017-05-27T03:06:14Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20b04dea-9d92-4ffe-acc5-ce3950c4d493", "eventTime": "2017-05-27T03:06:14Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366621f39-20d9-45c5-9240-1efb98c9c2da", "record_id": "flaws_cloudtrail:0000084:366621f39-20d9-45c5-9240-1efb98c9c2da", "row_index": 84, "timestamp": "2017-05-27T03:06:15Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366621f39-20d9-45c5-9240-1efb98c9c2da", "eventTime": "2017-05-27T03:06:15Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db60757-da98-466f-9e1c-d7df0313d161", "record_id": "flaws_cloudtrail:0000085:db60757-da98-466f-9e1c-d7df0313d161", "row_index": 85, "timestamp": "2017-05-27T03:06:16Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db60757-da98-466f-9e1c-d7df0313d161", "eventTime": "2017-05-27T03:06:16Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94250a8d-7dec-4d4a-a615-3236dcb15e43", "record_id": "flaws_cloudtrail:0000086:94250a8d-7dec-4d4a-a615-3236dcb15e43", "row_index": 86, "timestamp": "2017-05-27T03:06:17Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94250a8d-7dec-4d4a-a615-3236dcb15e43", "eventTime": "2017-05-27T03:06:17Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "264a7caf-f931-4a07-b5b9-296143db09940", "record_id": "flaws_cloudtrail:0000087:264a7caf-f931-4a07-b5b9-296143db09940", "row_index": 87, "timestamp": "2017-05-27T03:06:17Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "264a7caf-f931-4a07-b5b9-296143db09940", "eventTime": "2017-05-27T03:06:17Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2818b30-680f-4bc7-b3fb-8dadfa26f83d", "record_id": "flaws_cloudtrail:0000088:d2818b30-680f-4bc7-b3fb-8dadfa26f83d", "row_index": 88, "timestamp": "2017-05-27T03:06:19Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2818b30-680f-4bc7-b3fb-8dadfa26f83d", "eventTime": "2017-05-27T03:06:19Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7febb65b-d2c9-4d6f-b23a-f78510fc6930", "record_id": "flaws_cloudtrail:0000089:7febb65b-d2c9-4d6f-b23a-f78510fc6930", "row_index": 89, "timestamp": "2017-05-27T03:06:19Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7febb65b-d2c9-4d6f-b23a-f78510fc6930", "eventTime": "2017-05-27T03:06:19Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6dcc431-9660-4a53-a33a-be835e1fbc26", "record_id": "flaws_cloudtrail:0000090:c6dcc431-9660-4a53-a33a-be835e1fbc26", "row_index": 90, "timestamp": "2017-05-27T03:06:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6dcc431-9660-4a53-a33a-be835e1fbc26", "eventTime": "2017-05-27T03:06:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fe3ec57-11f8-42b4-a32e-db734bab9d58", "record_id": "flaws_cloudtrail:0000091:6fe3ec57-11f8-42b4-a32e-db734bab9d58", "row_index": 91, "timestamp": "2017-05-27T03:06:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fe3ec57-11f8-42b4-a32e-db734bab9d58", "eventTime": "2017-05-27T03:06:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "403e9e12-6013-4d28-b2e2-e24b52d51fd2", "record_id": "flaws_cloudtrail:0000092:403e9e12-6013-4d28-b2e2-e24b52d51fd2", "row_index": 92, "timestamp": "2017-05-27T03:06:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "403e9e12-6013-4d28-b2e2-e24b52d51fd2", "eventTime": "2017-05-27T03:06:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d1db17-4098-476f-88a3-5e697563f7a", "record_id": "flaws_cloudtrail:0000093:f8d1db17-4098-476f-88a3-5e697563f7a", "row_index": 93, "timestamp": "2017-05-27T03:06:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d1db17-4098-476f-88a3-5e697563f7a", "eventTime": "2017-05-27T03:06:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1e3db9d-126e-4e02-9646-30986ec2a", "record_id": "flaws_cloudtrail:0000094:a1e3db9d-126e-4e02-9646-30986ec2a", "row_index": 94, "timestamp": "2017-05-27T03:06:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1e3db9d-126e-4e02-9646-30986ec2a", "eventTime": "2017-05-27T03:06:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM8OE1A2R4784KZUU", "expiration": "May 27, 2017 4:06:23 AM", "sessionToken": "FQoDYXdzECQaDJO0DnuPqJh5pNI2HCLMAQguDFiSkdty0jvsOiqgdsc/9RxRNtYXhpcnZjDdzVzwWifzQk/oLcHzDdJKAIV66ZoizPllfkiq+diuN6PqB29ct/8+n/DqyB/pBER6YvpS+wQjTLhkL4AbfxwHyzmeh8aLkZMTWSEjJq70tjOofXQp+GvAiJUkEQ8KEFdfVvmr0a1+dJy0NIo25E8Ly/vAZTEn9P/jkQUbk9P7K64+TH6HC3mTwT9m/1ou3xBjM70g5VnbpOx6r5ZrTd5gFbcn+9omZqr+kYYzHkyHDSiv2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12c22e13-42b3-4f43-ad93-5ea05b44a12c", "record_id": "flaws_cloudtrail:0000095:12c22e13-42b3-4f43-ad93-5ea05b44a12c", "row_index": 95, "timestamp": "2017-05-27T03:06:23Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8AWAROKML9NWSYM0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12c22e13-42b3-4f43-ad93-5ea05b44a12c", "eventTime": "2017-05-27T03:06:23Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8AWAROKML9NWSYM0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38eda22f-5091-4584-acf8-0f356c7ec9fc", "record_id": "flaws_cloudtrail:0000096:38eda22f-5091-4584-acf8-0f356c7ec9fc", "row_index": 96, "timestamp": "2017-05-27T03:06:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38eda22f-5091-4584-acf8-0f356c7ec9fc", "eventTime": "2017-05-27T03:06:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALBRYB4H4FLULKYKG", "expiration": "May 27, 2017 4:06:24 AM", "sessionToken": "FQoDYXdzECQaDIgr++SzNdOctZs4ZCLMAQWmhAykPCzXsUreius/wHcF5r4WV+NngQcFy2gtDwC/AxGBxYo/ZhFP6caU5eWErDVB9wUW6laL3MT4ry/dlCxGMeyCzq2HT8/IElL2eXd1JZKWZEzKBNypCPa6CK1QSzekJWMzqsHdNOYnAGPaM+BBThtVlyLrl0VPXF9R2mTd8goyfK65Qu+ACDFV6aaV3PjUIfxVM/PhMnI7nr0iXIXjzalgjRn2dMuxfJqaNvLhvKsO70T075qDCE1ETKWNys3iSMS7QUvV5g5ooyiw2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bad9bcf-9cc0-46af-b33e-1118155e42f2", "record_id": "flaws_cloudtrail:0000097:8bad9bcf-9cc0-46af-b33e-1118155e42f2", "row_index": 97, "timestamp": "2017-05-27T03:06:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALBRYB4H4FLULKYKG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bad9bcf-9cc0-46af-b33e-1118155e42f2", "eventTime": "2017-05-27T03:06:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALBRYB4H4FLULKYKG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "809046c-99b8-4a00-a310-97c5532f0cf5", "record_id": "flaws_cloudtrail:0000098:809046c-99b8-4a00-a310-97c5532f0cf5", "row_index": 98, "timestamp": "2017-05-27T03:06:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM8OE1A2R4784KZUU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "809046c-99b8-4a00-a310-97c5532f0cf5", "eventTime": "2017-05-27T03:06:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM8OE1A2R4784KZUU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abc6d6de-3e99-470d-acd9-781d3ea4dc8a", "record_id": "flaws_cloudtrail:0000099:abc6d6de-3e99-470d-acd9-781d3ea4dc8a", "row_index": 99, "timestamp": "2017-05-27T03:06:25Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2ZZ3ORU3X7KB4TMZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abc6d6de-3e99-470d-acd9-781d3ea4dc8a", "eventTime": "2017-05-27T03:06:25Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2ZZ3ORU3X7KB4TMZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2622fe7c-c3a4-459a-b630-7c00728b", "record_id": "flaws_cloudtrail:0000100:2622fe7c-c3a4-459a-b630-7c00728b", "row_index": 100, "timestamp": "2017-05-27T03:06:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2622fe7c-c3a4-459a-b630-7c00728b", "eventTime": "2017-05-27T03:06:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2ZZ3ORU3X7KB4TMZ", "expiration": "May 27, 2017 4:06:25 AM", "sessionToken": "FQoDYXdzECQaDMWUHx+vdWZTuZ4YEiLMAeNvgQz0/BEb+WhA1+a0/jO02YoWiyC9uqgWvdnl+2FCS1EHr921tSDNJDwyfIA+RFiRC6uXB8DYqvdUKCOf/+TMO2qEECKsapF0ho+TyEnU2ar9LLsE5tpceGfZjrXfIl6ArRs/LrFctgLs5uPA+hk5+fNte40RqpsN6/CXXr/m19Y3obtYp1f6iBG3jE1t4AOSDyOS9R55QBQtgtJkp9lgbP/SBP0z/Q0yHbf0fO+HFzfl/jOZFLFfCZNX770tobuhZiT32nSF/Szknyix2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83fd0f38-0e3a-4090-b41b-908c6f522352", "record_id": "flaws_cloudtrail:0000101:83fd0f38-0e3a-4090-b41b-908c6f522352", "row_index": 101, "timestamp": "2017-05-27T03:06:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83fd0f38-0e3a-4090-b41b-908c6f522352", "eventTime": "2017-05-27T03:06:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABA82P1VISVWBWQXG", "expiration": "May 27, 2017 4:06:26 AM", "sessionToken": "FQoDYXdzECQaDEawAV6KSs6BMxpSSiLMAe3h9LvWyMK97ZmGuBwKh3KvhithfkM7MMvb6PuBkiivUBpM3hMiQEi42pbCNnWYZeqmA4laUmGfGpfI3MYOXB3FgK9pve1K8aycKdoGpvN1nhMfAR6CSq+Ajc6JTo0xtpBmGqITdFasAlPn0qET7DSZJ8uZL4wfYsKGuot5bFr+UtL+HUwQaFn6H/cw93qZM5Eor2sCtmkWTJAMBdTMcX9NC6UvNOqrR5jbHNXKvO4AJuhrQwHA2QM7TK5hl+7XQ8JMHETspiWUAt0r1Siy2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ca69b4-1aea-475a-9330-57685bdd7b5", "record_id": "flaws_cloudtrail:0000102:76ca69b4-1aea-475a-9330-57685bdd7b5", "row_index": 102, "timestamp": "2017-05-27T03:06:27Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABA82P1VISVWBWQXG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ca69b4-1aea-475a-9330-57685bdd7b5", "eventTime": "2017-05-27T03:06:27Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABA82P1VISVWBWQXG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:26Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b160532c-96df-4afb-90c4-8067a06a8b67", "record_id": "flaws_cloudtrail:0000103:9b160532c-96df-4afb-90c4-8067a06a8b67", "row_index": 103, "timestamp": "2017-05-27T03:06:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b160532c-96df-4afb-90c4-8067a06a8b67", "eventTime": "2017-05-27T03:06:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0QLCE025NFUB9DDG", "expiration": "May 27, 2017 4:06:27 AM", "sessionToken": "FQoDYXdzECQaDE8oSGUq7guLhFWS6yLMASlOFiUprqvgPp95eLurf8+fC7rNTWNBGcs7q6VXNfiKTo1ADYgbZj61Hy7VHy1GTof/72z38gJZcke0BOY1GSEi9qtBPIXu0FQVGLpURBRY1rsZF5UBqW4h7Ly1pUKWZJJR4nYZeGGWvkb+B5ZUxmuTrfOOGLBYLYqeEwCKvlpb1L/OwOhznh18bVLepq25SKSpdjZ3mMXn4NLk9vA/txpRg5mbR2OHkOIoQ6MMEKynmnyJww/P37ZXt/9s4d+/5AgkJ7QYN2SmkL5x3yiz2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7500e8bd-40b2-40df-aabc-a94e028184f1", "record_id": "flaws_cloudtrail:0000104:7500e8bd-40b2-40df-aabc-a94e028184f1", "row_index": 104, "timestamp": "2017-05-27T03:06:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0QLCE025NFUB9DDG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7500e8bd-40b2-40df-aabc-a94e028184f1", "eventTime": "2017-05-27T03:06:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0QLCE025NFUB9DDG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d783ddd-1580-4bbe-ba46-771cee18d4f0", "record_id": "flaws_cloudtrail:0000105:6d783ddd-1580-4bbe-ba46-771cee18d4f0", "row_index": 105, "timestamp": "2017-05-27T03:06:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d783ddd-1580-4bbe-ba46-771cee18d4f0", "eventTime": "2017-05-27T03:06:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7CYEH8JZ78DNO3V8", "expiration": "May 27, 2017 4:06:28 AM", "sessionToken": "FQoDYXdzECQaDNzfhro4myK+H03RQiLMAVq4LX8318f3rnfxMIyxsrPV6Ns/jkqy5NwmG/1qEgffgY7c3zJU8BGj3f0OP0WcfLaa1lldSH3PBDC3LnFfVtJmwEO7lwf1dwpkls8rxOMZptZrPh9Mbwo/FjuY4bF/xIM7KjNkGdj3by5nH3dVQ77KDS6+AqhJlIcwtPyX348OrsIek1g6EH4qXouI9gYgcCjXfz+qb7F+zfr6WfTIR8cqYSk53ssjd69o0zKEbkyxz44+VObKWQAGVxOFp0/xkjD50C0VDdoAzR9Igii02qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f127284a-f326-4d9c-9c0d-4e3a47f28dc6", "record_id": "flaws_cloudtrail:0000106:7f127284a-f326-4d9c-9c0d-4e3a47f28dc6", "row_index": 106, "timestamp": "2017-05-27T03:06:29Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7CYEH8JZ78DNO3V8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f127284a-f326-4d9c-9c0d-4e3a47f28dc6", "eventTime": "2017-05-27T03:06:29Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7CYEH8JZ78DNO3V8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c14a69eb-b6dd-42bb-bc73-1b2e195749dbf", "record_id": "flaws_cloudtrail:0000107:c14a69eb-b6dd-42bb-bc73-1b2e195749dbf", "row_index": 107, "timestamp": "2017-05-27T03:06:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c14a69eb-b6dd-42bb-bc73-1b2e195749dbf", "eventTime": "2017-05-27T03:06:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHONWDZPNS4PV12KW", "expiration": "May 27, 2017 4:06:30 AM", "sessionToken": "FQoDYXdzECQaDJYorre+1L2RHh1+LiLMAeZF1asx0oVMn7uTdMSp9/HXx/dyYWRULxarEMwyvsBNVocdre9HQ48d9P7F+e9QAqHPidpG2xqRbJRjjw32VQtJerS6/SEbF/ZWXZDnWc1Ci2yeKOxPMBaKF/mQ14QWWAvZzm5pcEOfY862qojWRVKP7GcGrl8jljf10it8W1f74M4Y7b/RnmnO9Ux8+yC/HBFwgSRqWbv4bLqQPM3jFuIsOJKw++i4dM6PjxQYXLMPhSp3vynn0WaWOj0ReB5tuEbIOGLtMRkAqL0RRyi22qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6281ab28-7413-488f-baa7-af181ad543fd", "record_id": "flaws_cloudtrail:0000108:6281ab28-7413-488f-baa7-af181ad543fd", "row_index": 108, "timestamp": "2017-05-27T03:06:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6281ab28-7413-488f-baa7-af181ad543fd", "eventTime": "2017-05-27T03:06:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARXPYECAG4NYIVKDW", "expiration": "May 27, 2017 4:06:30 AM", "sessionToken": "FQoDYXdzECQaDIwIlZksak4lcOpEfCLMAen72RMxJH1ObxVptNHltcAW/ulqla6x46cuTOLbVmor//tC2TGoznf7SZZHPLTATRN3Cc/GNbEw4RkrQljLVvJJK0y6mQSsJKxbucD4lojTfP78J14fuUYDTdIiXCEiw9NX2Btn4M6mVn0VXU8Ur5kFAf/x23ClaYMns8z19bLjbT4abjw+qvx8ePclyqigWEmQnHE1bN4dhKLV2Bux+JA2ktgq7fZ8EFevLe8hCQR8Xp5kPSUeeSqeDZNgA5VXKHsYFJN0i1dAmY5hoii22qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f594956-75f7-4406-8ee2-e35a862726", "record_id": "flaws_cloudtrail:0000109:8f594956-75f7-4406-8ee2-e35a862726", "row_index": 109, "timestamp": "2017-05-27T03:06:30Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHONWDZPNS4PV12KW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f594956-75f7-4406-8ee2-e35a862726", "eventTime": "2017-05-27T03:06:30Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHONWDZPNS4PV12KW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdb04cc2-c238-478e-8b19-34f43f93ee24", "record_id": "flaws_cloudtrail:0000110:cdb04cc2-c238-478e-8b19-34f43f93ee24", "row_index": 110, "timestamp": "2017-05-27T03:06:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARXPYECAG4NYIVKDW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdb04cc2-c238-478e-8b19-34f43f93ee24", "eventTime": "2017-05-27T03:06:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARXPYECAG4NYIVKDW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729bfe54-b1e7-4907-8814-1a318e8622e2", "record_id": "flaws_cloudtrail:0000111:729bfe54-b1e7-4907-8814-1a318e8622e2", "row_index": 111, "timestamp": "2017-05-27T03:06:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729bfe54-b1e7-4907-8814-1a318e8622e2", "eventTime": "2017-05-27T03:06:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHZNXMD9T0A9KISYW", "expiration": "May 27, 2017 4:06:32 AM", "sessionToken": "FQoDYXdzECQaDMKcaIprCSAP6lFiiiLMAT6Rqr5J9eBtqejkihbsi05+q5KJiF618MwF8vJRCPP0X8wboGNPmVqqc8OtYVATxGCMcyjNJBxLTU/JxN0uTnh2zE62bYbMH99BFNuSZWjRby8oTnFmWdyYHSsesrZwJBot9DDcSovGYzq3QjMjK6gzDtJgEx7CiDgFSoLQaZiKyPs9qOHtePT+2bhmVDVSeX64kcjfTJVPuPYXgKZcCx/AfthoXmVw/3q2DuqQYnY4NakKOWLYroBGiyCqNpK/pvGla3G39k1LdQ0AuCi42qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a323e64-40b9-49dd-b1b9-f941143a9d", "record_id": "flaws_cloudtrail:0000112:1a323e64-40b9-49dd-b1b9-f941143a9d", "row_index": 112, "timestamp": "2017-05-27T03:06:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHZNXMD9T0A9KISYW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a323e64-40b9-49dd-b1b9-f941143a9d", "eventTime": "2017-05-27T03:06:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHZNXMD9T0A9KISYW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62448ab-4380-4feb-9367-d378402ea", "record_id": "flaws_cloudtrail:0000113:62448ab-4380-4feb-9367-d378402ea", "row_index": 113, "timestamp": "2017-05-27T03:06:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62448ab-4380-4feb-9367-d378402ea", "eventTime": "2017-05-27T03:06:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKTA7E3B9WDJGE2RA", "expiration": "May 27, 2017 4:06:33 AM", "sessionToken": "FQoDYXdzECQaDMHSyL4HJ8pgZxgDyyLMARJv4FTc5DHGpQ+0Sk7TU5rmlrjIBOKr6Sq39z9Tj0LQPoKGs6Q5wtDhxIcZPDpmnRZ8UDn0uJ4wfYIN1UgaEyNrndz8zzI3dmHRdSOIO4z8JjJDvsW88qu8iz8GgKoPhXzasjuQ06ZFZIhSe67KPyTITLCMwAPTMAm+N8q6X9RYmkT/GpOeRkShc8uYWWPAffIUW5bmwhHAjEj45d86lLDpJbisAHvpbXZ1uet4ec4Q66mRnNJkZLcLu4iOAdHRiTHq8q7lvanF/l4kzii52qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a9fe8bc-bbd5-4bcf-8264-573a616f48f6", "record_id": "flaws_cloudtrail:0000114:2a9fe8bc-bbd5-4bcf-8264-573a616f48f6", "row_index": 114, "timestamp": "2017-05-27T03:06:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a9fe8bc-bbd5-4bcf-8264-573a616f48f6", "eventTime": "2017-05-27T03:06:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANHYOGI8S804SJVPO", "expiration": "May 27, 2017 4:06:34 AM", "sessionToken": "FQoDYXdzECQaDBu+NO2pup1fFjtt4CLMAUSQbJFjJLLTQdmiTGJ13Ygp6EjCh6eU7Dwb3YjsZjvhIN0Y6ZvBrnK7yhNPMBnTSp5M4bz9x6mR9+Gy1ugx+hXrnpGyVaQsHkF0fSt2JlICGVpHdA3R15XfZYjgKjma8gTmjpJrPAvbrm6QmzKfN+dCXEx9rv9RlA+3k/ldYWyTdudQbDPQSxoDdkgP+N9HDjurRKfkHOn8Wq71Ytm1WD1j6HWeSvHJzp13+xQRGwwEgLUQCOD49f2p21ffhLTOKftofSTba9ff/PjUhii62qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eac381b-b784-45f4-bbb0-8a7acad6dd08", "record_id": "flaws_cloudtrail:0000115:8eac381b-b784-45f4-bbb0-8a7acad6dd08", "row_index": 115, "timestamp": "2017-05-27T03:06:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eac381b-b784-45f4-bbb0-8a7acad6dd08", "eventTime": "2017-05-27T03:06:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC153SFBOGBHLVNRK", "expiration": "May 27, 2017 4:06:35 AM", "sessionToken": "FQoDYXdzECQaDHyv4/RZVYadWVVpYCLMAcm+kFdJ1lnkA8cVb6fxZMRAOa1lskDbxDiq/5MSqB9QALX0KpmHqb4CpeLHYlpPIkoiSjZfruIj66l79qUlnttEWFam9mh2ki21iUdwQy0jG+/uAEFwAGfC2ZW4HlVfuIopOK5nKYUsngDyCHmjmKGbzil6Wt7IJtLnuysEIg0f6hQ58zahRLbSh+qvABALlRb0t/PN7XgjgJr3DyyanVELnrRAjB94izGhtuam5VjoO9H5BSIlGNiGZguvXA89bhY87O6jWf4+4ESnYCi72qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52dced82-6f91-4530-9273-7a644516f9aa", "record_id": "flaws_cloudtrail:0000116:52dced82-6f91-4530-9273-7a644516f9aa", "row_index": 116, "timestamp": "2017-05-27T03:06:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANHYOGI8S804SJVPO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52dced82-6f91-4530-9273-7a644516f9aa", "eventTime": "2017-05-27T03:06:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANHYOGI8S804SJVPO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e730d137-bed7-4f7b-ba12-c8ce1720e70d", "record_id": "flaws_cloudtrail:0000117:e730d137-bed7-4f7b-ba12-c8ce1720e70d", "row_index": 117, "timestamp": "2017-05-27T03:06:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e730d137-bed7-4f7b-ba12-c8ce1720e70d", "eventTime": "2017-05-27T03:06:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXBNSMM6QH67CK4VM", "expiration": "May 27, 2017 4:06:36 AM", "sessionToken": "FQoDYXdzECQaDLpd+EGcYc8qR2XjkyLMAfqYZw6dupvVJGLxgDGnQisPc2eu/ljg3J56zkvAtr/s7pQBZglEVdm8MsnDWvrUEo6JYM6ntpf3T2cD8Gq1Q3d7ISrBaW5IRrQXlwHN3ZMt092m4UvP3fBJAvpsT+pagwaWsCwG1rlNO/W3Ect3QC84S6tcInOwQv5qIfi1KBf8f+obt8DhvkYs25TsOSYAXhNigPJ0jjfBB/mFllnC4keER0DrePnN31vqtQoopgdzXy5DCKu7SG8rBy5YYE6DGWFCVZm+JzAgMY2sZSi82qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0724b61c-065e-469c-bf3a-218472badab2", "record_id": "flaws_cloudtrail:0000118:0724b61c-065e-469c-bf3a-218472badab2", "row_index": 118, "timestamp": "2017-05-27T03:06:37Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXBNSMM6QH67CK4VM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0724b61c-065e-469c-bf3a-218472badab2", "eventTime": "2017-05-27T03:06:37Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXBNSMM6QH67CK4VM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c6954ea-bb1f-451b-a686-a18222bff76d", "record_id": "flaws_cloudtrail:0000119:6c6954ea-bb1f-451b-a686-a18222bff76d", "row_index": 119, "timestamp": "2017-05-27T03:06:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c6954ea-bb1f-451b-a686-a18222bff76d", "eventTime": "2017-05-27T03:06:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHW80T4GLOGF8G0G6", "expiration": "May 27, 2017 4:06:37 AM", "sessionToken": "FQoDYXdzECQaDNDoP2CQ6+56wi2arSLMAV7xvKczwcXDvOEAOA5mxuG0ep6bnRoJrumiACe3ZaiuDoUkyYG++6OkrmTkJA02KP10TGEHrCGpIgrIxynZd9Vpa4xoRWVTpPUP08m93mwYuhi1+14QXr4SwRNcNShElzckTOPnXcz8zmtL6T2jk9iVR8NUJcuFVOqD9odfDDrIotyMYxu1OalrJDf9KlrCQTaPYfOmm9SijQ0GA659W9c34Nfxuv3E7Am8WKPzYngTrlwAfbA0RTiywEZlWfVZVZ77NgKVIvxyQqbvWSi92qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140dda33-741f-4013-b034-d78ed46a5b65", "record_id": "flaws_cloudtrail:0000120:140dda33-741f-4013-b034-d78ed46a5b65", "row_index": 120, "timestamp": "2017-05-27T03:06:38Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHW80T4GLOGF8G0G6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140dda33-741f-4013-b034-d78ed46a5b65", "eventTime": "2017-05-27T03:06:38Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHW80T4GLOGF8G0G6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0089f24a-4152-48ac-8e1f-8976ff989df0", "record_id": "flaws_cloudtrail:0000121:0089f24a-4152-48ac-8e1f-8976ff989df0", "row_index": 121, "timestamp": "2017-05-27T03:06:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0089f24a-4152-48ac-8e1f-8976ff989df0", "eventTime": "2017-05-27T03:06:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA16FVXWKRW9VS9830", "expiration": "May 27, 2017 4:06:38 AM", "sessionToken": "FQoDYXdzECQaDFNKJNkxVrI8zMY8fSLMAedxcdj+Nvwxzr6I/V4H3WPNhw1Yp93VXnXVZEAksAG9Xb4xrx0FhVhVG+L1zYzyLCLkGMl87JF0Ru0kMsa9E9pqnQS8QCaXj/Y3vq72e8kPjGnIgIThTQRXRCHTjTtDPEM2RdKcO+L649c5xe23zSfp2/d1wKE2W1bByzEunwC4z8JitBhjM9UJyGZayTl1+t3SMEXCXrIo6hS8cvusrCwOLIjG3eWrKEP0zQicuDv1kEt0jo4E32quYz5u0VYUhU7MBEW4t5dia5vvVSi+2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "282e8aaa-ae24-4698-b964-4aa29cf7a011", "record_id": "flaws_cloudtrail:0000122:282e8aaa-ae24-4698-b964-4aa29cf7a011", "row_index": 122, "timestamp": "2017-05-27T03:06:39Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA16FVXWKRW9VS9830", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "282e8aaa-ae24-4698-b964-4aa29cf7a011", "eventTime": "2017-05-27T03:06:39Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA16FVXWKRW9VS9830", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "195cfbac-816e-4cee-9b44-b3aa91a5c314", "record_id": "flaws_cloudtrail:0000123:195cfbac-816e-4cee-9b44-b3aa91a5c314", "row_index": 123, "timestamp": "2017-05-27T03:06:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "195cfbac-816e-4cee-9b44-b3aa91a5c314", "eventTime": "2017-05-27T03:06:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANTGOFMUAV5MZS7SV", "expiration": "May 27, 2017 4:06:39 AM", "sessionToken": "FQoDYXdzECQaDGqy3+ZrBCvNCS40piLMAUar1gWMIEgRuctO6Yi2o7fAf6rQVlvHWwvLUMpCdLCTHPxWSQZars08s/KprpjNoyEWDF+wQQVZm0n0WGC1RwEOfqWEgYCTW2dSono19+ks8Qiuoi6wba1fJIPg0rZkbDpiFyvFuUHN6yJKujOVuSc800BLjiNs8JsYKcr7EDQg64ruiIAk+xCpSSFkkFz7x3UzCUrsCTm/dhJvbqKoGa5/8lWUNE1+8xE1aImGB5VMDmkVNZsKtV5dqnMjrfKWRO5S9dkzSWnBqHVxASi/2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d033d48-ec13-461b-a827-56b2e7ec8da2", "record_id": "flaws_cloudtrail:0000124:9d033d48-ec13-461b-a827-56b2e7ec8da2", "row_index": 124, "timestamp": "2017-05-27T03:06:40Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANTGOFMUAV5MZS7SV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d033d48-ec13-461b-a827-56b2e7ec8da2", "eventTime": "2017-05-27T03:06:40Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANTGOFMUAV5MZS7SV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ed5d48c-cbed-4573-9edf-9da23c875f19", "record_id": "flaws_cloudtrail:0000125:8ed5d48c-cbed-4573-9edf-9da23c875f19", "row_index": 125, "timestamp": "2017-05-27T03:06:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ed5d48c-cbed-4573-9edf-9da23c875f19", "eventTime": "2017-05-27T03:06:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQGMQFCXACZKY5FPQ", "expiration": "May 27, 2017 4:06:41 AM", "sessionToken": "FQoDYXdzECQaDEyIo5tkq4fpjHntyCLMAdqVrgq0AMoPzG2OOag7Yowxcn83kQPz2b8pj9aDYXIxsFB0mdmgMcAeA3bj/ZC4VzCd4iyhCIDl4mIugd1DNDfYHsE5LGCPS/76Imv1tIsYbyKO97WiAOw1nHu6hEyn6/gh8GUjq57leae1kKQWHSZ9d5TsbK7tW/fMIt2b6eseFs4mAvFWUHZawIymwqkp9azoYUalxgavNTP8zntNd9zDrSSaCE6da/qnMCP00guvS4QhkGsbVLfR+cW3eEj2HiIHWMT63N7YNSRUySjB2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf3ff57-f861-4d17-a21d-64143e113b12", "record_id": "flaws_cloudtrail:0000126:1cf3ff57-f861-4d17-a21d-64143e113b12", "row_index": 126, "timestamp": "2017-05-27T03:06:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf3ff57-f861-4d17-a21d-64143e113b12", "eventTime": "2017-05-27T03:06:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARJLULTH2JOGU8UF0", "expiration": "May 27, 2017 4:06:41 AM", "sessionToken": "FQoDYXdzECQaDJMWmlgycLRWwXLMBSLMATHczl0rUxBD4GEmXvwSMF32slhzup/07V8fgb0AOw1nPujh0HOkt6QikWG/y1SD9v3tcM100Qa40kVGlvDXHdDfil+Tltbz0LT0WsOAacPqUFtjAvSl8F/tTsRcObcdEHNi/EFLxQ6+uzUdh+hSMAYmHr2IRt8D471ObhlbRm6PBJp2AXWh96o5JHfCeMr9HrqS0CJVvA9c9vp4UukCRlcbGF5MTHUEYtkYouD79WSVAlEaB24+mYlCfHvyn+V/gpER/nczpjU560z/NijB2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "625878-d5e5-4017-97b8-821410e56bfe", "record_id": "flaws_cloudtrail:0000127:625878-d5e5-4017-97b8-821410e56bfe", "row_index": 127, "timestamp": "2017-05-27T03:06:41Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQGMQFCXACZKY5FPQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "625878-d5e5-4017-97b8-821410e56bfe", "eventTime": "2017-05-27T03:06:41Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQGMQFCXACZKY5FPQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058bc43e-2349-4309-bfcc-080682aa39d7", "record_id": "flaws_cloudtrail:0000128:058bc43e-2349-4309-bfcc-080682aa39d7", "row_index": 128, "timestamp": "2017-05-27T03:06:41Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQGMQFCXACZKY5FPQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058bc43e-2349-4309-bfcc-080682aa39d7", "eventTime": "2017-05-27T03:06:41Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQGMQFCXACZKY5FPQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbdd281d-b702-4868-914c-3128bf917bf5", "record_id": "flaws_cloudtrail:0000129:bbdd281d-b702-4868-914c-3128bf917bf5", "row_index": 129, "timestamp": "2017-05-27T03:06:41Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQGMQFCXACZKY5FPQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbdd281d-b702-4868-914c-3128bf917bf5", "eventTime": "2017-05-27T03:06:41Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQGMQFCXACZKY5FPQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0e2d47d-1a6a-49a3-b346-2e5e621e0c44", "record_id": "flaws_cloudtrail:0000130:c0e2d47d-1a6a-49a3-b346-2e5e621e0c44", "row_index": 130, "timestamp": "2017-05-27T03:06:42Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARJLULTH2JOGU8UF0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0e2d47d-1a6a-49a3-b346-2e5e621e0c44", "eventTime": "2017-05-27T03:06:42Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARJLULTH2JOGU8UF0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6fba3b4-5f72-4c89-aeab-c40c72a28363", "record_id": "flaws_cloudtrail:0000131:d6fba3b4-5f72-4c89-aeab-c40c72a28363", "row_index": 131, "timestamp": "2017-05-27T03:06:42Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARJLULTH2JOGU8UF0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6fba3b4-5f72-4c89-aeab-c40c72a28363", "eventTime": "2017-05-27T03:06:42Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARJLULTH2JOGU8UF0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84bcb22e-2b2d-4d29-8660-a5f1cfa0ee4d", "record_id": "flaws_cloudtrail:0000132:84bcb22e-2b2d-4d29-8660-a5f1cfa0ee4d", "row_index": 132, "timestamp": "2017-05-27T03:06:42Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARJLULTH2JOGU8UF0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84bcb22e-2b2d-4d29-8660-a5f1cfa0ee4d", "eventTime": "2017-05-27T03:06:42Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARJLULTH2JOGU8UF0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56fdbea5-e145-4035-b79a-7f2e3e06a081", "record_id": "flaws_cloudtrail:0000133:56fdbea5-e145-4035-b79a-7f2e3e06a081", "row_index": 133, "timestamp": "2017-05-27T03:06:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56fdbea5-e145-4035-b79a-7f2e3e06a081", "eventTime": "2017-05-27T03:06:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALSMKS0XGSZ4YFB5W", "expiration": "May 27, 2017 4:06:42 AM", "sessionToken": "FQoDYXdzECQaDDgoIX9jwx1naH8G6yLMAaIdiqj5QEHiNnSTYVEXCs+BcFTfpfQI3XlRh4YiQ1TnlwmgVsv/fQNvtrWAkFqHw3QVGJRn5DnSnFu5Go9KjvnUTy+6oun6tUWZoLn7nUPTqeVimqlWGti/oahrFgzp/IhNAQVdHXKWQg7DP7itna0UdtbahMjZ2ffF2Haeww0wmnuml/k+CHZsJYUBvsxyVfPb3U8GH/c8BPJGMuu2EMUp705Wgqz960yX5Pt7qBkQV2w+1I14sdA3h+BOyxx9wHy+o3sdkRyAoy1KdCjC2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59879-4bf6-4737-b825-37e81d28f4ef", "record_id": "flaws_cloudtrail:0000134:e59879-4bf6-4737-b825-37e81d28f4ef", "row_index": 134, "timestamp": "2017-05-27T03:06:43Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALSMKS0XGSZ4YFB5W", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59879-4bf6-4737-b825-37e81d28f4ef", "eventTime": "2017-05-27T03:06:43Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALSMKS0XGSZ4YFB5W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e9f87bd-f2d9-44a0-b94b-37e029c276ca", "record_id": "flaws_cloudtrail:0000135:1e9f87bd-f2d9-44a0-b94b-37e029c276ca", "row_index": 135, "timestamp": "2017-05-27T03:06:43Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALSMKS0XGSZ4YFB5W", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e9f87bd-f2d9-44a0-b94b-37e029c276ca", "eventTime": "2017-05-27T03:06:43Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALSMKS0XGSZ4YFB5W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "250fee61-0833-4a27-8b83-caffb14b1cfe", "record_id": "flaws_cloudtrail:0000136:250fee61-0833-4a27-8b83-caffb14b1cfe", "row_index": 136, "timestamp": "2017-05-27T03:06:44Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALSMKS0XGSZ4YFB5W", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "250fee61-0833-4a27-8b83-caffb14b1cfe", "eventTime": "2017-05-27T03:06:44Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALSMKS0XGSZ4YFB5W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "823e6c36-e2aa-4680-a7b1-020fb744e86e", "record_id": "flaws_cloudtrail:0000137:823e6c36-e2aa-4680-a7b1-020fb744e86e", "row_index": 137, "timestamp": "2017-05-27T03:06:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "823e6c36-e2aa-4680-a7b1-020fb744e86e", "eventTime": "2017-05-27T03:06:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO6A5XVQONG1SA4CK", "expiration": "May 27, 2017 4:06:44 AM", "sessionToken": "FQoDYXdzECQaDJXxKZVS4Dxyzni/1yLMAe/T32c/b3Jes5A1Ki6xOr7kAytU8o7pDIefd8l8fZTOURFEoAtVMgH9EShbjiYkJwGKuHkvQVIm0H1ftjKWGMYrkt/o+sDthnVF1HXeETYKB8joIwfAg+1PKdTNRTDMGuTukl78gd5vsLX5xf2l7J+jVJpZepAocryJz8myzqekQe7GYwV1OUgtD6GbH3V4U15NwUDV205xCYg8yejvLp3XukC4iFvGAmcdWBScgkGz7Ba4/4hEBv2+RaF0H1vPcnl9TNnjMiqpx5a+kCjE2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "579aa498-70f4-401a-ab07-4d88e9bfba93", "record_id": "flaws_cloudtrail:0000138:579aa498-70f4-401a-ab07-4d88e9bfba93", "row_index": 138, "timestamp": "2017-05-27T03:06:45Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO6A5XVQONG1SA4CK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "579aa498-70f4-401a-ab07-4d88e9bfba93", "eventTime": "2017-05-27T03:06:45Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO6A5XVQONG1SA4CK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ea48e9-9e7a-4c91-9bf5-f9ee642ad46b", "record_id": "flaws_cloudtrail:0000139:f0ea48e9-9e7a-4c91-9bf5-f9ee642ad46b", "row_index": 139, "timestamp": "2017-05-27T03:06:45Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO6A5XVQONG1SA4CK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ea48e9-9e7a-4c91-9bf5-f9ee642ad46b", "eventTime": "2017-05-27T03:06:45Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO6A5XVQONG1SA4CK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fb55518-097a-4774-b5af-ee8e944a5b61", "record_id": "flaws_cloudtrail:0000140:9fb55518-097a-4774-b5af-ee8e944a5b61", "row_index": 140, "timestamp": "2017-05-27T03:06:46Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO6A5XVQONG1SA4CK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fb55518-097a-4774-b5af-ee8e944a5b61", "eventTime": "2017-05-27T03:06:46Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO6A5XVQONG1SA4CK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f98d923d-a7b1-44a4-853b-d08db3c9e9dc", "record_id": "flaws_cloudtrail:0000141:f98d923d-a7b1-44a4-853b-d08db3c9e9dc", "row_index": 141, "timestamp": "2017-05-27T03:06:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f98d923d-a7b1-44a4-853b-d08db3c9e9dc", "eventTime": "2017-05-27T03:06:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3JQHTQAYSP1S3HDX", "expiration": "May 27, 2017 4:06:46 AM", "sessionToken": "FQoDYXdzECQaDGS1KivUtx7BQZ3BhiLMASzrvKeU68ssB43tpEBJ1KV8CoSLSbmSkuwk+18+1HSpuxSFRkux6fwu8lRRiryUijDbyeyeggRQcXF1SQ8DXYXyBG2T78vn8lQ6fYPhkOPbkZCYkvH8FPyiiHjGl4y6c6C/zjg1jbuCjRzVlu6Y/dG9q/rMYfJkD7VGzaUPtePGlKU9KjHSO9BbCf6sHIwoZiL2lWZAE8a1GKf4ykpGoi6hGphWQV3Va6CTZAdOU6ZxdD+trkNMunowkhUtkAICOUt+/MuU+Aq4z6OfYyjG2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a28db62-b2bc-43e7-b33e-1489fff98b6c", "record_id": "flaws_cloudtrail:0000142:6a28db62-b2bc-43e7-b33e-1489fff98b6c", "row_index": 142, "timestamp": "2017-05-27T03:06:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3JQHTQAYSP1S3HDX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a28db62-b2bc-43e7-b33e-1489fff98b6c", "eventTime": "2017-05-27T03:06:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3JQHTQAYSP1S3HDX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7ea1d1-6ed7-46e1-bcda-d13a30f44f65", "record_id": "flaws_cloudtrail:0000143:8d7ea1d1-6ed7-46e1-bcda-d13a30f44f65", "row_index": 143, "timestamp": "2017-05-27T03:06:47Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3JQHTQAYSP1S3HDX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7ea1d1-6ed7-46e1-bcda-d13a30f44f65", "eventTime": "2017-05-27T03:06:47Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3JQHTQAYSP1S3HDX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5823ce3-4325-4309-af3e-c24ee47a3699", "record_id": "flaws_cloudtrail:0000144:c5823ce3-4325-4309-af3e-c24ee47a3699", "row_index": 144, "timestamp": "2017-05-27T03:06:47Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3JQHTQAYSP1S3HDX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5823ce3-4325-4309-af3e-c24ee47a3699", "eventTime": "2017-05-27T03:06:47Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3JQHTQAYSP1S3HDX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a542043-78d1-4d35-9f24-cdf7e3a94485", "record_id": "flaws_cloudtrail:0000145:5a542043-78d1-4d35-9f24-cdf7e3a94485", "row_index": 145, "timestamp": "2017-05-27T03:06:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3441DEZKGNK14BW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a542043-78d1-4d35-9f24-cdf7e3a94485", "eventTime": "2017-05-27T03:06:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3441DEZKGNK14BW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b41462-7354-4a9d-91a1-8ff8baeb0d73", "record_id": "flaws_cloudtrail:0000146:5b41462-7354-4a9d-91a1-8ff8baeb0d73", "row_index": 146, "timestamp": "2017-05-27T03:06:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b41462-7354-4a9d-91a1-8ff8baeb0d73", "eventTime": "2017-05-27T03:06:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM3441DEZKGNK14BW", "expiration": "May 27, 2017 4:06:48 AM", "sessionToken": "FQoDYXdzECQaDBh3bb+2Sfag9DRzOyLMAaQfOf8EWFG8416AKVWdqIdXy7WihMKpUkA/kRGgZEsPqVmi8teD6tujnMl8GBCGPqMsPV16ff2FwPy3oLVrTrwt+Mk3RJ2OoYhaYHuvD6szrfLQrMDSCOCjgEDk+CA9Bw6a9D4hXp0qsxvFb0v2EK5lb4Yqoe/UVJyWGbXZfcwijyzkb6ltmNZlLL+gZKZGh7x/VTVy9OOLJXxMfieleLyDlnz7a+YHLRWQj4i/8REBDaxJCkR79ZkmahT/2E1/TViGnw26SwtJOzagBSjI2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c939a9f-b2f4-4e65-a01d-773089050fb6", "record_id": "flaws_cloudtrail:0000147:0c939a9f-b2f4-4e65-a01d-773089050fb6", "row_index": 147, "timestamp": "2017-05-27T03:06:49Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3441DEZKGNK14BW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c939a9f-b2f4-4e65-a01d-773089050fb6", "eventTime": "2017-05-27T03:06:49Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3441DEZKGNK14BW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9b7f0b-2180-4d1f-9e70-8c0df92a5525", "record_id": "flaws_cloudtrail:0000148:fb9b7f0b-2180-4d1f-9e70-8c0df92a5525", "row_index": 148, "timestamp": "2017-05-27T03:06:49Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3441DEZKGNK14BW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9b7f0b-2180-4d1f-9e70-8c0df92a5525", "eventTime": "2017-05-27T03:06:49Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3441DEZKGNK14BW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29d36b49-f057-40c5-bd7f-78e46bdc7bdf", "record_id": "flaws_cloudtrail:0000149:29d36b49-f057-40c5-bd7f-78e46bdc7bdf", "row_index": 149, "timestamp": "2017-05-27T03:06:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29d36b49-f057-40c5-bd7f-78e46bdc7bdf", "eventTime": "2017-05-27T03:06:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHRULW9TX4YV8IVD", "expiration": "May 27, 2017 4:06:49 AM", "sessionToken": "FQoDYXdzECQaDFoLG2DYLH66R/0cqyLMAeahunHABMpX7Rl9jJJXZmBRk+bJd+muKTswp0saJ5kbDWgtZDPZkIiIo1RwU0AQl3XLDWP/J3xn+3F5XxTWRHQs85NpWf+jto85hY5ZIacyxuRzc36kmr7E87/FonLVyu+iGUcwZo8XR6P4UCXP2hVwaso65srt0EyK3K2wG0bTW2XPWxZ/7SkyX4sbjlzlvrfKhFRux2J2Kll+83YxqdOqVO/S2UMnyOto/iz6NbtatrgIHjoqmg7wpTYEmup2EPAwOSxfCMH85ZonvijJ2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8703ed-d8ee-431a-9894-0936e734ee29", "record_id": "flaws_cloudtrail:0000150:7e8703ed-d8ee-431a-9894-0936e734ee29", "row_index": 150, "timestamp": "2017-05-27T03:06:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8703ed-d8ee-431a-9894-0936e734ee29", "eventTime": "2017-05-27T03:06:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPH55TN1CCX42M36A", "expiration": "May 27, 2017 4:06:50 AM", "sessionToken": "FQoDYXdzECQaDFlKZPDEEe14JzXE5iLMAYH+JHkL/mHbZPNLGxVQqgIgKJp9909kej9UwQRWiwWJ9QVSTE7WKsGrg82u9//PJXL5fQTbPRGQjy08UPlBy27Mp30GAOBI2rIuA3x07FUgZ6SKNSRlL/LhdUBHegvwrHZEs/3h5m0F9zqvWevGc/h+TtZUuT/6mLcBoMxFV1Ufj7J0+4kYZ86TGP4kNDxejZMUNgmMpyck2+tKKedECOM8u8he6kD92HwlerXN6he9o58IT5ocbcZRMPvRVAhHbP44L+J2dncmjANl2CjK2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4cf3b9d-2e1f-450c-be06-830c224cee8c", "record_id": "flaws_cloudtrail:0000151:e4cf3b9d-2e1f-450c-be06-830c224cee8c", "row_index": 151, "timestamp": "2017-05-27T03:06:50Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARHRULW9TX4YV8IVD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4cf3b9d-2e1f-450c-be06-830c224cee8c", "eventTime": "2017-05-27T03:06:50Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARHRULW9TX4YV8IVD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6203dfe-795b-40ee-830b-0ce0d63ff196", "record_id": "flaws_cloudtrail:0000152:e6203dfe-795b-40ee-830b-0ce0d63ff196", "row_index": 152, "timestamp": "2017-05-27T03:06:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARHRULW9TX4YV8IVD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6203dfe-795b-40ee-830b-0ce0d63ff196", "eventTime": "2017-05-27T03:06:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARHRULW9TX4YV8IVD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c6d64ab-8107-4e6f-a6c6-1ffe069137b7f", "record_id": "flaws_cloudtrail:0000153:8c6d64ab-8107-4e6f-a6c6-1ffe069137b7f", "row_index": 153, "timestamp": "2017-05-27T03:06:50Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARHRULW9TX4YV8IVD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c6d64ab-8107-4e6f-a6c6-1ffe069137b7f", "eventTime": "2017-05-27T03:06:50Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARHRULW9TX4YV8IVD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77292c6-62e2-428c-a665-cd794d828d3a", "record_id": "flaws_cloudtrail:0000154:77292c6-62e2-428c-a665-cd794d828d3a", "row_index": 154, "timestamp": "2017-05-27T03:06:51Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPH55TN1CCX42M36A", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77292c6-62e2-428c-a665-cd794d828d3a", "eventTime": "2017-05-27T03:06:51Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPH55TN1CCX42M36A", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e406b218-c3a7-4909-8301-0596f3e4f6e0", "record_id": "flaws_cloudtrail:0000155:e406b218-c3a7-4909-8301-0596f3e4f6e0", "row_index": 155, "timestamp": "2017-05-27T03:06:52Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPH55TN1CCX42M36A", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e406b218-c3a7-4909-8301-0596f3e4f6e0", "eventTime": "2017-05-27T03:06:52Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPH55TN1CCX42M36A", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b5f25e-ef93-42e3-9e9a-4918860bf3b9", "record_id": "flaws_cloudtrail:0000156:31b5f25e-ef93-42e3-9e9a-4918860bf3b9", "row_index": 156, "timestamp": "2017-05-27T03:06:52Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPH55TN1CCX42M36A", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b5f25e-ef93-42e3-9e9a-4918860bf3b9", "eventTime": "2017-05-27T03:06:52Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPH55TN1CCX42M36A", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "368908d84-8ef2-41f1-8e4e-9613943e174a", "record_id": "flaws_cloudtrail:0000157:368908d84-8ef2-41f1-8e4e-9613943e174a", "row_index": 157, "timestamp": "2017-05-27T03:06:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "368908d84-8ef2-41f1-8e4e-9613943e174a", "eventTime": "2017-05-27T03:06:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALXSRP4ILK9XKSI8I", "expiration": "May 27, 2017 4:06:52 AM", "sessionToken": "FQoDYXdzECQaDLe39XPRd9QlpjCW8CLMAXIf+SybxDoHARsBpmq4cHwfMRukx9tCWeyUIRuzEhBmaLWDqNRyGqTyJFEXfRJD9ZV7a47WiW2cEkZmmxmbq57Zi1nPj0twfDAUBqDqEB0oO4fB7Yaqo6sbJIgGzDHwD/lhr37UmI6mIObkSS0b4PafMV3KT2zLOWmAK+JZPqyZXJnLZKp9vmvOXvpX96eCaCNc4O0FNw1K/JOin01HMqvwPJlm52Z1xEfWTSQcoMbASvs9dF6q7Uxftp9/w15SdVEZBzCCXZvlpkLg1SjM2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddb03dd4-8f6e-4342-bfa7-02424d093", "record_id": "flaws_cloudtrail:0000158:ddb03dd4-8f6e-4342-bfa7-02424d093", "row_index": 158, "timestamp": "2017-05-27T03:06:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALXSRP4ILK9XKSI8I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddb03dd4-8f6e-4342-bfa7-02424d093", "eventTime": "2017-05-27T03:06:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALXSRP4ILK9XKSI8I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88715b0-00f0-43a7-9d35-b11e57e98ef4", "record_id": "flaws_cloudtrail:0000159:88715b0-00f0-43a7-9d35-b11e57e98ef4", "row_index": 159, "timestamp": "2017-05-27T03:06:53Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALXSRP4ILK9XKSI8I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88715b0-00f0-43a7-9d35-b11e57e98ef4", "eventTime": "2017-05-27T03:06:53Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALXSRP4ILK9XKSI8I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7a6f21d-b723-4ad5-ab2c-c09a348ff5cd", "record_id": "flaws_cloudtrail:0000160:a7a6f21d-b723-4ad5-ab2c-c09a348ff5cd", "row_index": 160, "timestamp": "2017-05-27T03:06:53Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALXSRP4ILK9XKSI8I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7a6f21d-b723-4ad5-ab2c-c09a348ff5cd", "eventTime": "2017-05-27T03:06:53Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALXSRP4ILK9XKSI8I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfadb5b1-d954-4906-8ba2-d1004abe685f", "record_id": "flaws_cloudtrail:0000161:dfadb5b1-d954-4906-8ba2-d1004abe685f", "row_index": 161, "timestamp": "2017-05-27T03:06:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfadb5b1-d954-4906-8ba2-d1004abe685f", "eventTime": "2017-05-27T03:06:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN5U4EQPM59ZWXR2T", "expiration": "May 27, 2017 4:06:53 AM", "sessionToken": "FQoDYXdzECQaDBuxdq4gGLQvstWMPiLMAXOAemT/jHQTvSmbB1OTFMBqa2CjtbJxaVFVfrfnjoHbbb1eMeU5P6HozpSdIDg99NU6/ZTjmvItO8hllRX9a40pgvhFSwUTldHq36NjwggiL9oxSdMQbT5ROzxY+c0nPoDbTvNj6jgQvhYqIbIUuLZEhDqMUR83Gttv6oVYeAiQ8ESPe25X8vpS+NEe4W9eouM6MWhgSZxaKen+0OlWckPDYoocNpK6stZciYPS/VImtT5p17rwEOjNjFtMn0zKES+Czn0SwfSfzfmAryjN2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0688dca-a49e-4fb7-9d92-33598ac0bac2", "record_id": "flaws_cloudtrail:0000162:b0688dca-a49e-4fb7-9d92-33598ac0bac2", "row_index": 162, "timestamp": "2017-05-27T03:06:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0688dca-a49e-4fb7-9d92-33598ac0bac2", "eventTime": "2017-05-27T03:06:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZXX62V3AU6GRODM", "expiration": "May 27, 2017 4:06:54 AM", "sessionToken": "FQoDYXdzECQaDEl5E6uhHzZYKusFgSLMAfzNPtE5SMHMvpSwhr13xWyls33ZbpAAd+stGnZZur8TzyA9+kkuaWpszNKHC3wkA8IVbEzO3txSDp23TponwxqrlQXvPRLRUfw52JCEDwWF7dBspuu9or4eHedg8114naZCEzev/0gKEUvgTIuOLdMbYNxEvB9lKMvIkJTlWcqTW1Bufd+DcMcS6vyXk1tgFuTisi3n897jw2x3WMfUDEfT+umUjeyHmypQijH2xgRuHwXUZLQXba1r1geyxdES0SGrJTdDwfjwjx02sSjO2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f097a91-505d-4780-a003-135397e7595", "record_id": "flaws_cloudtrail:0000163:5f097a91-505d-4780-a003-135397e7595", "row_index": 163, "timestamp": "2017-05-27T03:06:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f097a91-505d-4780-a003-135397e7595", "eventTime": "2017-05-27T03:06:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ71MPEJQT042CGRV", "expiration": "May 27, 2017 4:06:55 AM", "sessionToken": "FQoDYXdzECQaDDCIY3vI5pFEq//zZCLMAcwvyje2niRcNVrTQrjIW6LGB2GPNTJZRpos0bnXQVzuKIsUMo7HT+i1L+KT+GrYCmm/uODzB5bKYJ71NawOh0YoGfbI3nWnLpDcg+xySh2prEpH/x0TlfJR6cJOvhMt7JyRyWU1XXKNrLHLYKTiIwl59Kv0NtYbjX4kwOxmz8mNRXXCIe4BMxtizFQDkm1Izg3ug0agx4ZKug/Ql0GpB69n4R62xwT00GJAFsw8SdV7GkOKN/GlNsWDr3VHK6D7sanDhtZgfxqIQJrYoyjP2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab42d32b-e7ff-42dc-aa83-79b593668da5", "record_id": "flaws_cloudtrail:0000164:ab42d32b-e7ff-42dc-aa83-79b593668da5", "row_index": 164, "timestamp": "2017-05-27T03:06:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKZXX62V3AU6GRODM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab42d32b-e7ff-42dc-aa83-79b593668da5", "eventTime": "2017-05-27T03:06:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKZXX62V3AU6GRODM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "109ea106-7cd3-485e-90bd-c74fe988e44f", "record_id": "flaws_cloudtrail:0000165:109ea106-7cd3-485e-90bd-c74fe988e44f", "row_index": 165, "timestamp": "2017-05-27T03:06:55Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKZXX62V3AU6GRODM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "109ea106-7cd3-485e-90bd-c74fe988e44f", "eventTime": "2017-05-27T03:06:55Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKZXX62V3AU6GRODM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52b603a8-cee3-468c-a003-7f9ed5c78c61", "record_id": "flaws_cloudtrail:0000166:52b603a8-cee3-468c-a003-7f9ed5c78c61", "row_index": 166, "timestamp": "2017-05-27T03:06:55Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKZXX62V3AU6GRODM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52b603a8-cee3-468c-a003-7f9ed5c78c61", "eventTime": "2017-05-27T03:06:55Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKZXX62V3AU6GRODM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3f165b8-13d0-4f5c-8d3a-873bb701eb9f", "record_id": "flaws_cloudtrail:0000167:a3f165b8-13d0-4f5c-8d3a-873bb701eb9f", "row_index": 167, "timestamp": "2017-05-27T03:06:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3f165b8-13d0-4f5c-8d3a-873bb701eb9f", "eventTime": "2017-05-27T03:06:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ8GE0FFTGVBQO6BB", "expiration": "May 27, 2017 4:06:56 AM", "sessionToken": "FQoDYXdzECQaDFzUTB68igaNdQcTXyLMAbv4+dEP56x4V1G8ITmw3Cl0nsy/YQ9/VqZEDRXbLG8gD7pkVhyIe8L8eSnLmYe16Cil4X3fMvHcD2+BG+e5t+X+6ablC66qELfktD752bLz7DWE8tgma5ToHvYaIfPxUkzBS8JzaKhUajphc00XTmvFQaq1fzmvETv755MQUw+L2zrVVQx03ir0rkO6uiJJ45RV7ecyHmsntCKdXXW+/3sbCj6yxnJfNJBLDGNN+ea4M/Pv3gRnQBsUCy5ynIBu0Flkni1k2U6lPFX8jyjQ2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c8322c3-9650-4d89-8b1e-3ab2f4f8359d", "record_id": "flaws_cloudtrail:0000168:1c8322c3-9650-4d89-8b1e-3ab2f4f8359d", "row_index": 168, "timestamp": "2017-05-27T03:06:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ8GE0FFTGVBQO6BB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c8322c3-9650-4d89-8b1e-3ab2f4f8359d", "eventTime": "2017-05-27T03:06:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ8GE0FFTGVBQO6BB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bdea926-6f9d-45a6-8579-1f5e067c446a", "record_id": "flaws_cloudtrail:0000169:5bdea926-6f9d-45a6-8579-1f5e067c446a", "row_index": 169, "timestamp": "2017-05-27T03:06:57Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ8GE0FFTGVBQO6BB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bdea926-6f9d-45a6-8579-1f5e067c446a", "eventTime": "2017-05-27T03:06:57Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ8GE0FFTGVBQO6BB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d2b888-c98c-48ba-aa03-c3b02663afb", "record_id": "flaws_cloudtrail:0000170:b6d2b888-c98c-48ba-aa03-c3b02663afb", "row_index": 170, "timestamp": "2017-05-27T03:06:58Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ8GE0FFTGVBQO6BB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d2b888-c98c-48ba-aa03-c3b02663afb", "eventTime": "2017-05-27T03:06:58Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ8GE0FFTGVBQO6BB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e0816f-28e2-4857-adcf-bcfa0885ea0d", "record_id": "flaws_cloudtrail:0000171:b0e0816f-28e2-4857-adcf-bcfa0885ea0d", "row_index": 171, "timestamp": "2017-05-27T03:06:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e0816f-28e2-4857-adcf-bcfa0885ea0d", "eventTime": "2017-05-27T03:06:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHT49GQM8W0LPL05D", "expiration": "May 27, 2017 4:06:58 AM", "sessionToken": "FQoDYXdzECQaDMM3sRPubEL3dIIyZSLMAVISWktAMkw1Ym1KDY5cXs4xTRzPG4RKXmYSA4cIMC5bzr0obGBt1Agj2HO46ciknTU8w9PL7UUFuc0kkDt4wgqDEwGClDKURMdfpr0vqCkJKucsl8T88djDFhkiuR7IwlFSWcaHZErTbRQsyAeNO32JUzUZoAGuP5XGtS5/EUEqe/rqG2tSFhrlyefaopaoANKnVXv8/T6qC2pStMWa1g6wLqsEfvjK6iI3qJETSs+JXEbLwAUkkULTqe7ROhVpv4MzyC0+9i4CMr3l3yjS2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506ff92f-4422-4fa9-80eb-61956744f2fe", "record_id": "flaws_cloudtrail:0000172:506ff92f-4422-4fa9-80eb-61956744f2fe", "row_index": 172, "timestamp": "2017-05-27T03:06:59Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHT49GQM8W0LPL05D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506ff92f-4422-4fa9-80eb-61956744f2fe", "eventTime": "2017-05-27T03:06:59Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHT49GQM8W0LPL05D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f5f5f6-ca9e-4c61-8658-816609e14cf", "record_id": "flaws_cloudtrail:0000173:c0f5f5f6-ca9e-4c61-8658-816609e14cf", "row_index": 173, "timestamp": "2017-05-27T03:06:59Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHT49GQM8W0LPL05D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f5f5f6-ca9e-4c61-8658-816609e14cf", "eventTime": "2017-05-27T03:06:59Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHT49GQM8W0LPL05D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "351a617b-4935-4268-9fb1-fdcc53d58168", "record_id": "flaws_cloudtrail:0000174:351a617b-4935-4268-9fb1-fdcc53d58168", "row_index": 174, "timestamp": "2017-05-27T03:06:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHT49GQM8W0LPL05D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "351a617b-4935-4268-9fb1-fdcc53d58168", "eventTime": "2017-05-27T03:06:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHT49GQM8W0LPL05D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:06:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d91e53ba-69e5-43a3-9aa6-e641dd3552fa", "record_id": "flaws_cloudtrail:0000175:d91e53ba-69e5-43a3-9aa6-e641dd3552fa", "row_index": 175, "timestamp": "2017-05-27T03:07:00Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU3OWMG3PLINLDV2U", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d91e53ba-69e5-43a3-9aa6-e641dd3552fa", "eventTime": "2017-05-27T03:07:00Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU3OWMG3PLINLDV2U", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:00Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb151ff-ba93-462d-b5cf-ba0898af820a", "record_id": "flaws_cloudtrail:0000176:5fb151ff-ba93-462d-b5cf-ba0898af820a", "row_index": 176, "timestamp": "2017-05-27T03:07:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb151ff-ba93-462d-b5cf-ba0898af820a", "eventTime": "2017-05-27T03:07:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU3OWMG3PLINLDV2U", "expiration": "May 27, 2017 4:07:00 AM", "sessionToken": "FQoDYXdzECQaDMOrpoHS8EUXNEidBiLMAeuEozFqn3QqYSsJx9Op44D3kYES3088XPGOZxTNkKpfgRQGkbp+52kjmo+DS94O/4pCqkH5PXxP26/4SdUDQTQcL1brVmQLU12PcFpm0ljckD7grT3PE3KnQW2Gz4iB4VgzR857lGXDSB7kSUR0Tucj94NrfmIGyTwNU5qlide0/plNIbHwJiUQP8zANxVLpsMYJ1qwiD3feKKwn/oQX/qOl3LEa0he0pRymxye0LUxnVx8Ya/zvKAIQYzNOTk5leZYptzzFOxLH1lraSjU2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b357238-8cfd-48fe-ab28-47adadfbbfa9", "record_id": "flaws_cloudtrail:0000177:b357238-8cfd-48fe-ab28-47adadfbbfa9", "row_index": 177, "timestamp": "2017-05-27T03:07:01Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU3OWMG3PLINLDV2U", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b357238-8cfd-48fe-ab28-47adadfbbfa9", "eventTime": "2017-05-27T03:07:01Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU3OWMG3PLINLDV2U", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:00Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8ebd55b-efdc-4216-9200-11841f2e", "record_id": "flaws_cloudtrail:0000178:b8ebd55b-efdc-4216-9200-11841f2e", "row_index": 178, "timestamp": "2017-05-27T03:07:01Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU3OWMG3PLINLDV2U", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8ebd55b-efdc-4216-9200-11841f2e", "eventTime": "2017-05-27T03:07:01Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU3OWMG3PLINLDV2U", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:00Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83cef99a-391e-44a6-8dd6-d74ce8a869f3", "record_id": "flaws_cloudtrail:0000179:83cef99a-391e-44a6-8dd6-d74ce8a869f3", "row_index": 179, "timestamp": "2017-05-27T03:07:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83cef99a-391e-44a6-8dd6-d74ce8a869f3", "eventTime": "2017-05-27T03:07:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU0SA2UA2MJ4KR8TV", "expiration": "May 27, 2017 4:07:01 AM", "sessionToken": "FQoDYXdzECQaDG08v3KyMtxY++K3ECLMAfHKj89VC0HF7NLhwTiv/jbaDOziAk4jNbAbnd7229HW81DnVZkirtlS40pmnjTC8pXqgWpzCZK+qptIDfjb257J/1MCa5aFOV1wJkP2r50WZlx3fta6UmaBFbuanWYSn+o3iwnd8VMGRJ3ZpdW7Uh4bYQAFgZ8BhPrLrULPCZz4c5+iPWm5Ms398ywsAea+yw5iP+Az1SNiznBqlyp1n7mtwyQICf0U1IzpEhdHujbEQ2zlC601+pnVCFoHVgvm/Bzf2RIhNDXiyI4WWyjV2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22b24b5a-44b4-4815-bbb5-8d8778b51aef", "record_id": "flaws_cloudtrail:0000180:22b24b5a-44b4-4815-bbb5-8d8778b51aef", "row_index": 180, "timestamp": "2017-05-27T03:07:02Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU0SA2UA2MJ4KR8TV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22b24b5a-44b4-4815-bbb5-8d8778b51aef", "eventTime": "2017-05-27T03:07:02Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU0SA2UA2MJ4KR8TV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60af0fbb-b3d8-4948-bc78-6b973411d8e77", "record_id": "flaws_cloudtrail:0000181:60af0fbb-b3d8-4948-bc78-6b973411d8e77", "row_index": 181, "timestamp": "2017-05-27T03:07:02Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU0SA2UA2MJ4KR8TV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60af0fbb-b3d8-4948-bc78-6b973411d8e77", "eventTime": "2017-05-27T03:07:02Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU0SA2UA2MJ4KR8TV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fee1e2c-59bf-44a6-9a77-6a8aba55b275", "record_id": "flaws_cloudtrail:0000182:0fee1e2c-59bf-44a6-9a77-6a8aba55b275", "row_index": 182, "timestamp": "2017-05-27T03:07:02Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU0SA2UA2MJ4KR8TV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fee1e2c-59bf-44a6-9a77-6a8aba55b275", "eventTime": "2017-05-27T03:07:02Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU0SA2UA2MJ4KR8TV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f988273-c23f-4704-97a3-292000c71b1c5", "record_id": "flaws_cloudtrail:0000183:d2f988273-c23f-4704-97a3-292000c71b1c5", "row_index": 183, "timestamp": "2017-05-27T03:07:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f988273-c23f-4704-97a3-292000c71b1c5", "eventTime": "2017-05-27T03:07:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4ZBZI0E8W6K1YCV8", "expiration": "May 27, 2017 4:07:03 AM", "sessionToken": "FQoDYXdzECQaDONS8JGSOCtKvPUdeCLMAWqDeUaiDhzraMbgIJF/fE2f+nzCX+EQO+QxDberf4Hg5u5okg/itmvv1443OoB1jp+UQWYAovD/Q3Uyc9KUM4nut6EHt+Jdg4Idd/KeTUSxL/ilsgviYRHHJXrDiq7/PT/a9sey2LjcKmgJiyfPIB6HFtESbwA0ay3LUVLLlNyHIH+yC+oAg5gUQXyG4TDhtx4zowUS6vyZWhqMq0OsC1dn3fYSSOe80nRrUZdmBg1thtCEusOENCV+Q1gCTGc9MQB7nfx9dZSltQA13yjX2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "221f189c-7f91-4880-88f5-bd2309de8d69", "record_id": "flaws_cloudtrail:0000184:221f189c-7f91-4880-88f5-bd2309de8d69", "row_index": 184, "timestamp": "2017-05-27T03:07:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "221f189c-7f91-4880-88f5-bd2309de8d69", "eventTime": "2017-05-27T03:07:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGDX39TYIUCGIYPQG", "expiration": "May 27, 2017 4:07:03 AM", "sessionToken": "FQoDYXdzECQaDKuLj3UwL+y3oGDUNCLMAb4Hb59PWy4JRsxA+xObyfuRxcnbHxt9/rfYohzMept+PngJe2QinmQwUxh4zLOLO33Lsr2zMVUbhw79NF72+DB96KZvIEA8x1mImmBrJ/li+vBGiF3tjRq4yYruefC14YimqPduHq1RYma04wfREWhk/8qSg5xrsQGLbWpgM0TgVgrc/cbM+eCBjTE/lnCLu4MtTGlnLLnfRA8giluM0hRKe2+cUi2zstyWeQlUi9XGGkLAU41iiipUo8K+hvBGec8c9DjeuMTGYlUKBSjX2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63367d65-1214-4518-a68d-b80bdd496e7e", "record_id": "flaws_cloudtrail:0000185:63367d65-1214-4518-a68d-b80bdd496e7e", "row_index": 185, "timestamp": "2017-05-27T03:07:03Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4ZBZI0E8W6K1YCV8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63367d65-1214-4518-a68d-b80bdd496e7e", "eventTime": "2017-05-27T03:07:03Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4ZBZI0E8W6K1YCV8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c594f587-7e5d-4a39-95d5-69bd539b830d", "record_id": "flaws_cloudtrail:0000186:c594f587-7e5d-4a39-95d5-69bd539b830d", "row_index": 186, "timestamp": "2017-05-27T03:07:04Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGDX39TYIUCGIYPQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c594f587-7e5d-4a39-95d5-69bd539b830d", "eventTime": "2017-05-27T03:07:04Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGDX39TYIUCGIYPQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eb7a0f0-e123-4735-a657-678230fede56b", "record_id": "flaws_cloudtrail:0000187:6eb7a0f0-e123-4735-a657-678230fede56b", "row_index": 187, "timestamp": "2017-05-27T03:07:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eb7a0f0-e123-4735-a657-678230fede56b", "eventTime": "2017-05-27T03:07:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPM3NFCJPK9NUJ7QO", "expiration": "May 27, 2017 4:07:05 AM", "sessionToken": "FQoDYXdzECQaDOTsYqdTkfrjw3QaqCLMAfohMiJchUKYtSN+cqJn9wfPWUlovAxVCECeuOVKwin6wrrmUz7VoxNgBPeuB9vWl0LHqI7lepMfnkk97odha6z11aLyQddTZKyeg+EGAyIkmsHVVCpdWUSptLk9SYigto9fC5Qq24MQbW2NNkM1Kp1PssjlkvIRIBYTW+JR/Lu5BJeZu+JOsLcbsFYoLX4hi2DibLFQGpSZM81jJs3luLmNifUfV7+4SsFxAMgzQOb61YfiNYznFAADkLb5G1NLVxTNXdz8hv484174taCjZ2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cc91308-11dd-48ad-bf54-8dc0c3765eb6", "record_id": "flaws_cloudtrail:0000188:9cc91308-11dd-48ad-bf54-8dc0c3765eb6", "row_index": 188, "timestamp": "2017-05-27T03:07:06Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPM3NFCJPK9NUJ7QO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cc91308-11dd-48ad-bf54-8dc0c3765eb6", "eventTime": "2017-05-27T03:07:06Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPM3NFCJPK9NUJ7QO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e29a18f-0c90-4a48-8ea0-1cc2bfbdc29c", "record_id": "flaws_cloudtrail:0000189:9e29a18f-0c90-4a48-8ea0-1cc2bfbdc29c", "row_index": 189, "timestamp": "2017-05-27T03:07:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e29a18f-0c90-4a48-8ea0-1cc2bfbdc29c", "eventTime": "2017-05-27T03:07:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI32IO96J4P3B1CYO", "expiration": "May 27, 2017 4:07:06 AM", "sessionToken": "FQoDYXdzECQaDE8NipJ5IZX5hP0TYCLMAa2ojmeuvlkWAdq54Wcu+6vy2kurUIcGzB04RelzBDFKZPU9KTGxu4TkVDeGYsFkCHOpmZgdfyYyJ2cF3sGqNzERKHi6Jpn+1vMysGtKwRFc9WdKielQq66GcFtAz7FqkwqTy/QKGryngfG+RU8uhwAOtX35HDi8Q34meAD+et+TdM9ILWJMgVTBBQvfBKhrt/S4PU3L2TF7Vn89WdzWGCFjYTsjVTWRdkxU5u0r/nWsvSMtPSydCPvZWqni2wjnCvYuYKVw2nEjhxEW0yja2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2b6cacf-5585-46ad-94e2-8c8e29394", "record_id": "flaws_cloudtrail:0000190:b2b6cacf-5585-46ad-94e2-8c8e29394", "row_index": 190, "timestamp": "2017-05-27T03:07:07Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI32IO96J4P3B1CYO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2b6cacf-5585-46ad-94e2-8c8e29394", "eventTime": "2017-05-27T03:07:07Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI32IO96J4P3B1CYO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d68063af-3949-4d2a-93a1-30c4299eef55", "record_id": "flaws_cloudtrail:0000191:d68063af-3949-4d2a-93a1-30c4299eef55", "row_index": 191, "timestamp": "2017-05-27T03:07:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d68063af-3949-4d2a-93a1-30c4299eef55", "eventTime": "2017-05-27T03:07:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGSRD7VKX9HD8G405", "expiration": "May 27, 2017 4:07:07 AM", "sessionToken": "FQoDYXdzECQaDKg5nD0asv8XzS0diSLMAWVlHl3U5vz9otStXGkyyRVOybVlKOBcADjri+9or8qsZ+xztpCXYaHXN/sUXpySpTWSnxZqU7cuplWqA+1oxheRSQGhzaknrm2pSyWrPnFX5Y5BOaVB8jH2Sk/tslZgDsaVZeatB7hhkt/Zh8vXrNx60qbE0my1w0+wf9KAW12snHYqyTDNQ9sMSmU6mBeikj7C1FV/1AWRi1u1zD0XtvhMd6WEM2mEDwWnIl9cTqmiDeIPQEWExO1KGJzs5eUX6vAA5ncZlxm1CnWXASjb2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8078b1b2-3aab-4639-a5d9-56ed810690b56", "record_id": "flaws_cloudtrail:0000192:8078b1b2-3aab-4639-a5d9-56ed810690b56", "row_index": 192, "timestamp": "2017-05-27T03:07:08Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGSRD7VKX9HD8G405", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8078b1b2-3aab-4639-a5d9-56ed810690b56", "eventTime": "2017-05-27T03:07:08Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGSRD7VKX9HD8G405", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f091370-9d8d-4fe7-9c66-f4a749f97b0a", "record_id": "flaws_cloudtrail:0000193:9f091370-9d8d-4fe7-9c66-f4a749f97b0a", "row_index": 193, "timestamp": "2017-05-27T03:07:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f091370-9d8d-4fe7-9c66-f4a749f97b0a", "eventTime": "2017-05-27T03:07:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV7H9AM2O490TGSBW", "expiration": "May 27, 2017 4:07:09 AM", "sessionToken": "FQoDYXdzECQaDBV2ZWgEvpe8QXGiDCLMAdxZVjR7cnc7TXCcx6tW1FThUDHujp8rCIoc2oSkJbLFBymgkqKSTVZm4ej5+qAjKGY9a0OuqOqH2ulmJTm6utqBOqeIC+83rrJIr7AOhJ+zDvP8xwDOB380GT08PLTWj0it0LkwcS085398emupD/Ij5Bb65Txg2MPqIxDu4p/GaJd+JjpMn3gYdbNWnWgKZR/0nOccMgp3bvIQpHMxSHkpj0jzCo3HqWgZGXDQXMAI5oHrBidrzMzdcM67SzkHoPw8Bdp9p7LB0QbGeZijd2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d33f581-dfae-41e0-b448-df4736ea54bc", "record_id": "flaws_cloudtrail:0000194:0d33f581-dfae-41e0-b448-df4736ea54bc", "row_index": 194, "timestamp": "2017-05-27T03:07:10Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7H9AM2O490TGSBW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d33f581-dfae-41e0-b448-df4736ea54bc", "eventTime": "2017-05-27T03:07:10Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7H9AM2O490TGSBW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d74dab-3892-4a9d-ac0d-a839222c6c1d", "record_id": "flaws_cloudtrail:0000195:83d74dab-3892-4a9d-ac0d-a839222c6c1d", "row_index": 195, "timestamp": "2017-05-27T03:07:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d74dab-3892-4a9d-ac0d-a839222c6c1d", "eventTime": "2017-05-27T03:07:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4PJPE7641D9RINEA", "expiration": "May 27, 2017 4:07:10 AM", "sessionToken": "FQoDYXdzECQaDKFwS9pdSTl/Aj2kfSLMAfGru3N9engatuWDQZ2EdO0+58S/onyz+5JVhNrvxGEBCpVqi6iJnNnOPgV/Uo2XNLsZ0td/ag175u/3RiD8b1MphfRoFMA11bQtTrLuU//xZNK02mKCVdgOnAWbmkfsGq26Xxyb9uppiu+HCdrjj0y13J5JI2aHGHBrugic9kNxLs9Esm3N229OE7KnUdjIIom4By0WuNAbaYk6J5ch36ZAB8xe5teY65WICkhL0iyWccFB84x8jttDPxGm7flJ/iEJDqbsPmccdfjyQyje2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6536dc1-b26d-4164-95a4-bb0ae577871", "record_id": "flaws_cloudtrail:0000196:f6536dc1-b26d-4164-95a4-bb0ae577871", "row_index": 196, "timestamp": "2017-05-27T03:07:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6536dc1-b26d-4164-95a4-bb0ae577871", "eventTime": "2017-05-27T03:07:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJG04Z1LCMGHP8DWO", "expiration": "May 27, 2017 4:07:11 AM", "sessionToken": "FQoDYXdzECQaDERMcASIUA1zW7YJQSLMAdhQ2vOcK5VYVSwug9wmJq48a6od2G9ymaZVObaIbEwsxXQ295qMvwRcTuhIxEHPz32ecoRVTUU2RtTw5gVWNf2Kl4vg0MLqU6clQffBK5xOZZ81c0Fu/gqEdBD2oaNUYMbDhkCW6q8q34Ad9V2hTkPARu6H/zdeP9Lbk9WFaqa2Uj0u+1dUx85zAeYza0IlYcy5oiTw1BYYykO2n8PL/CaMmMSF5xXHnJHicOhal8myB2HNdLsf4OaoVirZywurI0WKnupTKmhnbwEqRCjf2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c22df80-78ca-4c4c-85f3-2ea28f290342e", "record_id": "flaws_cloudtrail:0000197:6c22df80-78ca-4c4c-85f3-2ea28f290342e", "row_index": 197, "timestamp": "2017-05-27T03:07:11Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4PJPE7641D9RINEA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c22df80-78ca-4c4c-85f3-2ea28f290342e", "eventTime": "2017-05-27T03:07:11Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4PJPE7641D9RINEA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "849a5ebe-6edd-4d61-add1-a44b757741c3", "record_id": "flaws_cloudtrail:0000198:849a5ebe-6edd-4d61-add1-a44b757741c3", "row_index": 198, "timestamp": "2017-05-27T03:07:12Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJG04Z1LCMGHP8DWO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "849a5ebe-6edd-4d61-add1-a44b757741c3", "eventTime": "2017-05-27T03:07:12Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJG04Z1LCMGHP8DWO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864d197a-2efa-4ec2-8103-ee45b4cf268b", "record_id": "flaws_cloudtrail:0000199:864d197a-2efa-4ec2-8103-ee45b4cf268b", "row_index": 199, "timestamp": "2017-05-27T03:07:13Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG05MY0T5EE1NQGFB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864d197a-2efa-4ec2-8103-ee45b4cf268b", "eventTime": "2017-05-27T03:07:13Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG05MY0T5EE1NQGFB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d68444-75b9-4fb2-b9cf-1b2499fa77c3", "record_id": "flaws_cloudtrail:0000200:7d68444-75b9-4fb2-b9cf-1b2499fa77c3", "row_index": 200, "timestamp": "2017-05-27T03:07:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d68444-75b9-4fb2-b9cf-1b2499fa77c3", "eventTime": "2017-05-27T03:07:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO235B40JA4W15NYT", "expiration": "May 27, 2017 4:07:13 AM", "sessionToken": "FQoDYXdzECQaDNw6Q2Y1RkDrlKCNSiLMAezofiHTFwJW54FKgqb0vd1BuFhUMUoSB0sKZ7OJzjZc65npyzC1QNq72Mrh/36oE1ZbsbLcAwOp5H2T0uqKReE0gTTzOENfRUXwMT38KDIHJ9Jtxuy/iu92AkRLNIEH79TdQT6BsTpecWGE+QO5SX+m22bZpY0hSRpH899DzUnq4qvSWLdyG4rd6oyRgLAT7xo2kBKBs7f4/CoGCOpa2NpVnwcQLcAO6GsXbWcfsUMN0AQSFKJQN3lAylS7mNTGm8kO0+YU4JP/R7s70yjh2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5f2cb8a-5724-455e-9f32-78600efc5a8", "record_id": "flaws_cloudtrail:0000201:e5f2cb8a-5724-455e-9f32-78600efc5a8", "row_index": 201, "timestamp": "2017-05-27T03:07:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5f2cb8a-5724-455e-9f32-78600efc5a8", "eventTime": "2017-05-27T03:07:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG05MY0T5EE1NQGFB", "expiration": "May 27, 2017 4:07:13 AM", "sessionToken": "FQoDYXdzECQaDNsOsisdLsDB30S17SLMAdhTFB5VCFCemrDcN+f3aNk4lxAbVujAd7azjOnVYsTOHEhbWu7Wv1+JCAxkAlhHv6hblN/J5B3Ln+gqjmmknWXUBKtLhgTYmDben8K3VTyw9pM8TJ3zZhb11RpJy85Ys3hib8PVL+phjn03E75u3OL9QwqB0bfoyazqYhm+mcL30VRbdpK0YojTMkB3AwArhd9mwsXtFqheT4bZS2N10THLjjtu2Yv1kXmLD8QX/XKlpLDsYefE0hXvEBVbDfvk3ajSSlTX72vZX4KSmyjh2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a5f272b-6000-4052-81d9-088861e4b4ef7", "record_id": "flaws_cloudtrail:0000202:6a5f272b-6000-4052-81d9-088861e4b4ef7", "row_index": 202, "timestamp": "2017-05-27T03:07:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a5f272b-6000-4052-81d9-088861e4b4ef7", "eventTime": "2017-05-27T03:07:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA51HIQCBT57D6E3MN", "expiration": "May 27, 2017 4:07:15 AM", "sessionToken": "FQoDYXdzECQaDG7vFdhQq36T3ckalSLMAaeXEkqQuQAgr+PnpaG5jVnDWSllvlPUP/wWzD5F7PLLm7fw/f4EseYdhsKjmwxw1d7iUEkmlibJytm+BBKxJJUpI6OJZtE+nALe4gdnDNuRGSPvtQn3vrEKGK4x2wqYjnGbGwDSHPtfBQJX9MKNuaZhCWpT4Y9bcTZVjX8HfUrAf31pN6g4qdu7eUaX2xhdoynO4yeiX1j40FA+83aDC+OYEtjOq6ZJqlGh/vv+WBsHONYrvNb4AZv3V+EbYC38mcyuqYR8uG89y1wX0ijj2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "129023e-a708-42a4-83c0-36545f7a2", "record_id": "flaws_cloudtrail:0000203:129023e-a708-42a4-83c0-36545f7a2", "row_index": 203, "timestamp": "2017-05-27T03:07:15Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA51HIQCBT57D6E3MN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "129023e-a708-42a4-83c0-36545f7a2", "eventTime": "2017-05-27T03:07:15Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA51HIQCBT57D6E3MN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "602b1039-d4ab-4bc5-bfa8-f17eabb3b32f", "record_id": "flaws_cloudtrail:0000204:602b1039-d4ab-4bc5-bfa8-f17eabb3b32f", "row_index": 204, "timestamp": "2017-05-27T03:07:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "602b1039-d4ab-4bc5-bfa8-f17eabb3b32f", "eventTime": "2017-05-27T03:07:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATQ5EFGC5WQ18LKGU", "expiration": "May 27, 2017 4:07:16 AM", "sessionToken": "FQoDYXdzECQaDJRutJ5BdzEa/T+gBCLMAaEOk6NUpzZC00KfNRA3lrMJ8vJGzYwv4Ed4o1Gweto62eNYlOevjT3UTCku+P4ceEesNNz+JqwSitm6EFB4DwCngQ5HV8/JS12vt0d53YCRTq+gx+rC7qPgSWS48SirutUxstLelaQHOCEaOkzYUzCnfN9GFNxnUp8lEnClsNg8X47B9fowz0lNE1XyEOT1ZOwkdflzyC8U5kMsWLhA+BSdPSRQnbZZma+Wx3C2GPO1tlRyKteziX0lfuhSCofHJdnp27xfFlwyf8cZcijk2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb6112a-3765-4952-89f3-681537d58", "record_id": "flaws_cloudtrail:0000205:2cb6112a-3765-4952-89f3-681537d58", "row_index": 205, "timestamp": "2017-05-27T03:07:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb6112a-3765-4952-89f3-681537d58", "eventTime": "2017-05-27T03:07:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHBT6O9AO4TWO4PQX", "expiration": "May 27, 2017 4:07:16 AM", "sessionToken": "FQoDYXdzECQaDN6vuWpFMT7kPRRH3SLMAWROg+HyJwhkuffvqNWFvfnaItatc4X/Qv4AQ90pAS0it+kcHWhfjAjIo0tsyQPBny/E0fI9PqjJH7Ih1EMFGeZMMikr7AA3dM6C+MFmZZCzulAc5LVAbX7xexnlsjP0IKGppDkVRt4DG1yP+pPJTyy5cf3OQ5nwEGOAefxzwfIXv0/4Pupr2+2mIpZuvJFJx7q4VVhR5rxCbKQv9HDRoK2Z9DDXpSAu9XgyQReXmnsYyEJbvAG67rQCR9O68dfF19YEbnKCqa/VdUSeEijk2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a748507e-a5b1-49b0-a979-ff84bfeb9a61", "record_id": "flaws_cloudtrail:0000206:9a748507e-a5b1-49b0-a979-ff84bfeb9a61", "row_index": 206, "timestamp": "2017-05-27T03:07:18Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATQ5EFGC5WQ18LKGU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a748507e-a5b1-49b0-a979-ff84bfeb9a61", "eventTime": "2017-05-27T03:07:18Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATQ5EFGC5WQ18LKGU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98003bb-3d44-472c-b30b-9110c9008ecb", "record_id": "flaws_cloudtrail:0000207:98003bb-3d44-472c-b30b-9110c9008ecb", "row_index": 207, "timestamp": "2017-05-27T03:07:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98003bb-3d44-472c-b30b-9110c9008ecb", "eventTime": "2017-05-27T03:07:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5KU6AV48AZ5BUUUN", "expiration": "May 27, 2017 4:07:18 AM", "sessionToken": "FQoDYXdzECQaDL8jQnV0O6dsSpvEMyLMAUxWPeH9kIqFVsssS3ID6cq72brIdutZ+f/dyEnxQYN0VLMgMwz+jcSrpUGcqUY4TnHVwr5OOPXDnSoHWX151Eg0agdNX9bOedVFlwbpYqcycFw/ORpGkNLWwfl+TOgfpNqyrBzXZgS7If3MTC9wQ8mmQ/sd4kKcXHfjvRZWDvYm1zcAOoREgapOB6X5fofc8Q+qvy7F3bL9TrI7mHrmVThp/jQs+6IUjdtFOKGewSWBMbRJ4pAFpSviAmVmgZpazioDfKhC6xW2WiwVvijm2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0bcaef5-fc73-4f98-97a2-d8c90259", "record_id": "flaws_cloudtrail:0000208:c0bcaef5-fc73-4f98-97a2-d8c90259", "row_index": 208, "timestamp": "2017-05-27T03:07:19Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5KU6AV48AZ5BUUUN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0bcaef5-fc73-4f98-97a2-d8c90259", "eventTime": "2017-05-27T03:07:19Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5KU6AV48AZ5BUUUN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585277d24-e1e8-4f31-bedf-c46fce8ce198", "record_id": "flaws_cloudtrail:0000209:585277d24-e1e8-4f31-bedf-c46fce8ce198", "row_index": 209, "timestamp": "2017-05-27T03:07:20Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMSS62JEF6VCZO3GJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585277d24-e1e8-4f31-bedf-c46fce8ce198", "eventTime": "2017-05-27T03:07:20Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMSS62JEF6VCZO3GJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c13522-3297-48de-896e-c786671ccde6", "record_id": "flaws_cloudtrail:0000210:2c13522-3297-48de-896e-c786671ccde6", "row_index": 210, "timestamp": "2017-05-27T03:07:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c13522-3297-48de-896e-c786671ccde6", "eventTime": "2017-05-27T03:07:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMSS62JEF6VCZO3GJ", "expiration": "May 27, 2017 4:07:20 AM", "sessionToken": "FQoDYXdzECQaDN+lb3jHJD++KSUk1SLMAeG1nBoGCLoJE1CqUsphiq56TWk9giG9vIXdXkAM9lxMD21a1YFUlbAqdZ4alRPTuJ6mzZgGP0antGpaNlwoBYv+56UCimkpG7YcumispsjRui8SbFdjM2hwtTHBwST1Q0XxAQcBW3PJxEm+933nZUJGgW27eSlN95S5kcyHQG9B209ZZLBCNRJCpBWvPNKOtH7L70NNp9RqzrAup19WqgE16+eoj70viaJYyHHBM9PNyF49wPplh55VGkuGBHiP3I7JBIX8L2EBQjS3Syjo2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be84f86-3870-4052-b978-1688a0b40625", "record_id": "flaws_cloudtrail:0000211:8be84f86-3870-4052-b978-1688a0b40625", "row_index": 211, "timestamp": "2017-05-27T03:07:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be84f86-3870-4052-b978-1688a0b40625", "eventTime": "2017-05-27T03:07:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATDHAN6GNX0IF9J9T", "expiration": "May 27, 2017 4:07:21 AM", "sessionToken": "FQoDYXdzECQaDEIoZL/smVJqXpBaTyLMAZxrHLNgwkSeg8JDqQKeF0nYn9PTUA+7fu/j867RLL4A/UFPLhs9D1iatsu7NWGAvHkZss2MZtYZKjXMlhzaREv1efJjXCRY6iQ86gRr3DNCO2cqzqLQGpqC/YGQjZjs2rHS748D0fFEJvLzBfIKizQXVC2UkMRGOZBPGAd32zHzUZPkaeb1tF2AFDTL0eV+FKfvx+6EbwT1I2klACcg6sJSBVJaeEKeE56bnbc+xN5x/h3LkpfvyL2xjVroo56Gqocx+wXjGTEEJQtWoijp2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76f07e99-5648-4b57-87d4-410bcf5914d2", "record_id": "flaws_cloudtrail:0000212:76f07e99-5648-4b57-87d4-410bcf5914d2", "row_index": 212, "timestamp": "2017-05-27T03:07:22Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATDHAN6GNX0IF9J9T", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76f07e99-5648-4b57-87d4-410bcf5914d2", "eventTime": "2017-05-27T03:07:22Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATDHAN6GNX0IF9J9T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "467534-9cd1-4fbd-8e82-e6b5d9f01f1c", "record_id": "flaws_cloudtrail:0000213:467534-9cd1-4fbd-8e82-e6b5d9f01f1c", "row_index": 213, "timestamp": "2017-05-27T03:07:22Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "467534-9cd1-4fbd-8e82-e6b5d9f01f1c", "eventTime": "2017-05-27T03:07:22Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e013b6ff-d6dc-4b5a-a039-e82d32a91e9e", "record_id": "flaws_cloudtrail:0000214:e013b6ff-d6dc-4b5a-a039-e82d32a91e9e", "row_index": 214, "timestamp": "2017-05-27T03:07:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e013b6ff-d6dc-4b5a-a039-e82d32a91e9e", "eventTime": "2017-05-27T03:07:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK5B24NDJKVAA3X25", "expiration": "May 27, 2017 4:07:22 AM", "sessionToken": "FQoDYXdzECQaDCYYtlQ9xP7Id/A77CLMARenOucGioAOH8iaPOiPxpWzSfmE73hS7qTEwVMFRNsLxQg1h8rXfqiUZdquMw7102+PuwUaZgv6PvJ2R44tZDoaQ3xKY6zY3+/Awf/Gr7SomPfC/yGSHlEyzgDCg3vcTfyt9T7gCBXdo4VPSo1OWmT37He3+U7xefP708Y03xBNGUM0hhmAFo+zJFGslNh5dBI2o2r0XBsdeP3RcbQWrA8XTkDktspAvlQmIlo2pf1ceVyAUGq9Iljr02qLgHZH0eH44706NWWlcTpjoijq2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5be90ed6-b97b-4a5f-9263-718a919c1578", "record_id": "flaws_cloudtrail:0000215:5be90ed6-b97b-4a5f-9263-718a919c1578", "row_index": 215, "timestamp": "2017-05-27T03:07:23Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5be90ed6-b97b-4a5f-9263-718a919c1578", "eventTime": "2017-05-27T03:07:23Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "743903f5-9056-4b2b-8a6a-ccbe5aa57aa0", "record_id": "flaws_cloudtrail:0000216:743903f5-9056-4b2b-8a6a-ccbe5aa57aa0", "row_index": 216, "timestamp": "2017-05-27T03:07:23Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "743903f5-9056-4b2b-8a6a-ccbe5aa57aa0", "eventTime": "2017-05-27T03:07:23Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "828e27a6-809d-4d71-9a05-f3676c323a28", "record_id": "flaws_cloudtrail:0000217:828e27a6-809d-4d71-9a05-f3676c323a28", "row_index": 217, "timestamp": "2017-05-27T03:07:23Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "828e27a6-809d-4d71-9a05-f3676c323a28", "eventTime": "2017-05-27T03:07:23Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035ea7cd-d085-433f-aacd-3b7810736af8", "record_id": "flaws_cloudtrail:0000218:035ea7cd-d085-433f-aacd-3b7810736af8", "row_index": 218, "timestamp": "2017-05-27T03:07:23Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035ea7cd-d085-433f-aacd-3b7810736af8", "eventTime": "2017-05-27T03:07:23Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10277c-7925-4926-b3fe-50fe33c7cd5a", "record_id": "flaws_cloudtrail:0000219:10277c-7925-4926-b3fe-50fe33c7cd5a", "row_index": 219, "timestamp": "2017-05-27T03:07:23Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10277c-7925-4926-b3fe-50fe33c7cd5a", "eventTime": "2017-05-27T03:07:23Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99fc7b60-96c0-4398-b73d-a743c0d4cab8", "record_id": "flaws_cloudtrail:0000220:99fc7b60-96c0-4398-b73d-a743c0d4cab8", "row_index": 220, "timestamp": "2017-05-27T03:07:23Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99fc7b60-96c0-4398-b73d-a743c0d4cab8", "eventTime": "2017-05-27T03:07:23Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyName": "read_level_6_bucket", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faf607d7-3503-47e0-b4b2-729226f4", "record_id": "flaws_cloudtrail:0000221:faf607d7-3503-47e0-b4b2-729226f4", "row_index": 221, "timestamp": "2017-05-27T03:07:23Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK5B24NDJKVAA3X25", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faf607d7-3503-47e0-b4b2-729226f4", "eventTime": "2017-05-27T03:07:23Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK5B24NDJKVAA3X25", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d6a5d68-cb2f-4c11-b198-a3ac628d37b1", "record_id": "flaws_cloudtrail:0000222:8d6a5d68-cb2f-4c11-b198-a3ac628d37b1", "row_index": 222, "timestamp": "2017-05-27T03:07:24Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d6a5d68-cb2f-4c11-b198-a3ac628d37b1", "eventTime": "2017-05-27T03:07:24Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7d946696-d941-4358-b58a-336a21ef456b", "record_id": "flaws_cloudtrail:0000223:f7d946696-d941-4358-b58a-336a21ef456b", "row_index": 223, "timestamp": "2017-05-27T03:07:24Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7d946696-d941-4358-b58a-336a21ef456b", "eventTime": "2017-05-27T03:07:24Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a84d74ea-7202-436c-85d5-2099cd6ab319", "record_id": "flaws_cloudtrail:0000224:a84d74ea-7202-436c-85d5-2099cd6ab319", "row_index": 224, "timestamp": "2017-05-27T03:07:24Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a84d74ea-7202-436c-85d5-2099cd6ab319", "eventTime": "2017-05-27T03:07:24Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b99ae0-e622-4635-9d92-8218e35ee496", "record_id": "flaws_cloudtrail:0000225:26b99ae0-e622-4635-9d92-8218e35ee496", "row_index": 225, "timestamp": "2017-05-27T03:07:24Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b99ae0-e622-4635-9d92-8218e35ee496", "eventTime": "2017-05-27T03:07:24Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a84e0403-537a-41b2-91d3-a768896a77f", "record_id": "flaws_cloudtrail:0000226:a84e0403-537a-41b2-91d3-a768896a77f", "row_index": 226, "timestamp": "2017-05-27T03:07:24Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA56XC6ALPILHMYVGF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a84e0403-537a-41b2-91d3-a768896a77f", "eventTime": "2017-05-27T03:07:24Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA56XC6ALPILHMYVGF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:05:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "675d31de-b52f-41d6-8617-71fa726f3f2c", "record_id": "flaws_cloudtrail:0000227:675d31de-b52f-41d6-8617-71fa726f3f2c", "row_index": 227, "timestamp": "2017-05-27T03:07:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "675d31de-b52f-41d6-8617-71fa726f3f2c", "eventTime": "2017-05-27T03:07:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5N8DAVFJXU4BU1TZ", "expiration": "May 27, 2017 4:07:25 AM", "sessionToken": "FQoDYXdzECQaDAgf0XcYuTUxJbnR6yLMAVyM3J7hMjCn3OEop4htBMwqfG64KL+Y2Y9KJMhfNSYJ3fSbrquHN7eP4+g0LGIKrFzGqM/uidKo3Y8wtTxc0+GvaaiMPqxezg5ZebyOgzvMRYuwSB9OkESdEDiSAqLtwqOMnNKY+4Gih/CYKijYYybVCGkx/KwcD0egwfW6jDGTRzk/zsaQVng4bTQdqfb4JtZfyvmNgu9o9HOkQh6UqK0oAvDWaPSAdso3hOz6E+bexfrzSCMk4J3JK8pAbo7wo4hc0dA4fJHYGGSidijt2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e7602cd-e60b-4553-afbe-0449506fa2ac", "record_id": "flaws_cloudtrail:0000228:9e7602cd-e60b-4553-afbe-0449506fa2ac", "row_index": 228, "timestamp": "2017-05-27T03:07:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e7602cd-e60b-4553-afbe-0449506fa2ac", "eventTime": "2017-05-27T03:07:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJSPRFSO2D8G7FZP2", "expiration": "May 27, 2017 4:07:25 AM", "sessionToken": "FQoDYXdzECQaDKV6OIDSPdb2PL6TKyLMAelJVc+hwHVEwVzOcERv9zH7FQ38S8/x6lFME3p+MSGLkdWaCD+z0LB8G7LZXGLncZG53Up34i1Y2+bNMjYfXwlEYvGn+SZUDd5phVcVyipnXxCxL62BL8BnxMHT2eSYethBqtKQYapeAw5xkW1FQJ0fmO7Fq5TipTX4zoOvPGKEvLPSpXkIKoYtalE4xVTDgA1K/mYB6NV91GncCfmCUJoTS30Y7tTLcSNNes8nR5dQSWBZkrVxNWcVEizXZ902Km0veE74OPmrkUpqiCjt2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f14ae8a-173d-477a-a1b3-f91a5bfa44d9", "record_id": "flaws_cloudtrail:0000229:8f14ae8a-173d-477a-a1b3-f91a5bfa44d9", "row_index": 229, "timestamp": "2017-05-27T03:07:25Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6XQYTK78FI0O6CQW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f14ae8a-173d-477a-a1b3-f91a5bfa44d9", "eventTime": "2017-05-27T03:07:25Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6XQYTK78FI0O6CQW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f3d671-e508-4f0e-8298-95da6cc192432", "record_id": "flaws_cloudtrail:0000230:a7f3d671-e508-4f0e-8298-95da6cc192432", "row_index": 230, "timestamp": "2017-05-27T03:07:26Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMANLHLLJW4HGYC2C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f3d671-e508-4f0e-8298-95da6cc192432", "eventTime": "2017-05-27T03:07:26Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMANLHLLJW4HGYC2C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10dc3b34-685c-4bec-a651-9fd24e61a1cf", "record_id": "flaws_cloudtrail:0000231:10dc3b34-685c-4bec-a651-9fd24e61a1cf", "row_index": 231, "timestamp": "2017-05-27T03:07:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10dc3b34-685c-4bec-a651-9fd24e61a1cf", "eventTime": "2017-05-27T03:07:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6DM2LQJ13R4SICTG", "expiration": "May 27, 2017 4:07:26 AM", "sessionToken": "FQoDYXdzECQaDNCK8cJrjg/6YrpXzyLMAZLFBud5zHROV27WfvEPRDSZNSB25Vni0r4y87VXKYzaKNA9YrOOaYNz9TtzwR4o6tGCai2sve+l91mgQ9WdTskKTZ+yiH3uis0MtmGY/yQHoo8xi2W0PGtZuzo20JoDAPH3lTqmtGV9GdqMN3XiPJRJb+gMZAf8ptYj6yuPU94AqXdN8USQl+ikHcTQu+w6LdBza58N7T85N05HCxKqP2HAskBdSyWtQBoXjsiGAx4N2s2wBHLMLFI8keX4FZ0AovTgObghG+dVyfGVASju2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d209739-00b7-4922-951e-979ae18518bd", "record_id": "flaws_cloudtrail:0000232:8d209739-00b7-4922-951e-979ae18518bd", "row_index": 232, "timestamp": "2017-05-27T03:07:27Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATIC751RKHHOT2AEJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d209739-00b7-4922-951e-979ae18518bd", "eventTime": "2017-05-27T03:07:27Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATIC751RKHHOT2AEJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:26Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "953d753e-d34f-4eaf-aaeb-b6c6b7d63880", "record_id": "flaws_cloudtrail:0000233:953d753e-d34f-4eaf-aaeb-b6c6b7d63880", "row_index": 233, "timestamp": "2017-05-27T03:07:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "953d753e-d34f-4eaf-aaeb-b6c6b7d63880", "eventTime": "2017-05-27T03:07:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV8KUWMTP89UY1IXI", "expiration": "May 27, 2017 4:07:28 AM", "sessionToken": "FQoDYXdzECQaDD/kt52PZ8jjesKukyLMAeJvZNpsRLvz68wmcFQJpQF2AewDwdDNUTLDZMwZW92CMj/gblLlritmqHUctkAFHia7e3b7FLOrHBw0RuVlsHHhiZGwtP9grv8Moi4ApKTPj4ngJTGN3QpqxjzhNus9Tmu0Jc6gmFn+RzlmRgdb1C0wliFOz1XbcUoRIVT5/n4x7t0cim4tZr/2iIp7qhACsx2taYYzSZyg5DuZ7wjSdKcP/QSO0hqFG++ZlHb30u2nTNAe7jOsGk0XPKuX5GQdnJyCabmW5Z/p7OLeyCjw2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a3d7dce-6e69-41c7-a13d-88807fdc3dd5", "record_id": "flaws_cloudtrail:0000234:9a3d7dce-6e69-41c7-a13d-88807fdc3dd5", "row_index": 234, "timestamp": "2017-05-27T03:07:29Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8IY9JOWZ9FPYSS12", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a3d7dce-6e69-41c7-a13d-88807fdc3dd5", "eventTime": "2017-05-27T03:07:29Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8IY9JOWZ9FPYSS12", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "325f71de-db9e-4399-becc-446f0d17724e", "record_id": "flaws_cloudtrail:0000235:325f71de-db9e-4399-becc-446f0d17724e", "row_index": 235, "timestamp": "2017-05-27T03:07:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "325f71de-db9e-4399-becc-446f0d17724e", "eventTime": "2017-05-27T03:07:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWGRDWO5BU6N5XWSA", "expiration": "May 27, 2017 4:07:29 AM", "sessionToken": "FQoDYXdzECQaDGiDDRZxScZZ4fDILiLMAfgp2gXHla92QgQNE2gPYCvpnPjIWg6JXEAJZZU2W4PnQ8E7T9OFZ1pz9kV9phjdB9UWa3g+by4pb+Rao5Fm5FCc5jISsW3cQogbDAisySn/k0zIuMYJI8SusKev80GVNy1dtyefKGW2toDoA7l7IHslMBLH09yhKh3plRqKxJkncbK3cZ6DlLz1YntZUpO3eD1wP8FWyiqPfMqGfLw6EfkvYRpED0VHdvj3mkcFGOw6X0XczUYvf49odadlwfdSCe7CycYh0ETbPl9aaSjx2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e07b8bd6-5eb9-42c9-9722-feae119d1a30", "record_id": "flaws_cloudtrail:0000236:e07b8bd6-5eb9-42c9-9722-feae119d1a30", "row_index": 236, "timestamp": "2017-05-27T03:07:30Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPW3JYSZRSOC8F2GX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e07b8bd6-5eb9-42c9-9722-feae119d1a30", "eventTime": "2017-05-27T03:07:30Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPW3JYSZRSOC8F2GX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea84440-b99e-424a-abdb-a71c6d0bdab1", "record_id": "flaws_cloudtrail:0000237:4ea84440-b99e-424a-abdb-a71c6d0bdab1", "row_index": 237, "timestamp": "2017-05-27T03:07:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea84440-b99e-424a-abdb-a71c6d0bdab1", "eventTime": "2017-05-27T03:07:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGFAJZWOJMQEAWX8P", "expiration": "May 27, 2017 4:07:31 AM", "sessionToken": "FQoDYXdzECQaDB3t7UVZHwcNjhBrMyLMAbhAH/6hyfVOmEnoe/OMFbXyLsC9NyTm1R51UMEdZUsnOeYs4DGDAcNr1+XLh0MOdKGp/73z4QssS/Y6W1H1vEA0Ka1hq+MmUy5GJpygYCi2kxYx89h0zpTC5/m7J2BYF593cxjrZjSI4fZ1oh9+kOoCqIi3WPVGueoJWOdnWqKsv+Su+3NgKCT3wiAitaMgOiOl7AFQ5dRcFAZEaT3D44dyh0N4x+gXtNnl+8kSolGIAbyv9xwvqd6vFmEFtz8zRjs3qV/6ZBzKbm2E2ijz2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f4b61a-0ab0-4e62-aaf3-b5b27c951337e", "record_id": "flaws_cloudtrail:0000238:e0f4b61a-0ab0-4e62-aaf3-b5b27c951337e", "row_index": 238, "timestamp": "2017-05-27T03:07:32Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA73JUL0LASI2S681K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f4b61a-0ab0-4e62-aaf3-b5b27c951337e", "eventTime": "2017-05-27T03:07:32Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA73JUL0LASI2S681K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e85bed-f5af-4157-8f6e-1ff8786733e1", "record_id": "flaws_cloudtrail:0000239:f0e85bed-f5af-4157-8f6e-1ff8786733e1", "row_index": 239, "timestamp": "2017-05-27T03:07:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e85bed-f5af-4157-8f6e-1ff8786733e1", "eventTime": "2017-05-27T03:07:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW1JYJKQA7NP9BWAY", "expiration": "May 27, 2017 4:07:32 AM", "sessionToken": "FQoDYXdzECQaDOSY5bj8Y/hBpdY5aCLMAWPCzmJEZOoXEm/44hnryrBbc80Ad1JdU9DlRR4CqwCmuMNcB2bE4gng1yv/ewG/pbuTEDWMdvwWXNpG2sDmCeXf0/3A2sm5hrv3F0FY/ge2LLm9fkwJn2KzirOrOd8K5Gc1NEhRHkLbnhGOVEh+SkCZAk3JTuK+WwQJsokS5ydDPbG4BBqYuVfUKh+xjFQH/ZIAfO/e3dLK4dph+Rd1TEQn2MIfs6/hAskEfO/Fvkpi/TVUSr34sZUcoe3+g+Voa+KGD2G0J760V9f/kij02qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9b41dfb-b9f9-48dd-bd04-127c149e7364", "record_id": "flaws_cloudtrail:0000240:f9b41dfb-b9f9-48dd-bd04-127c149e7364", "row_index": 240, "timestamp": "2017-05-27T03:07:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9b41dfb-b9f9-48dd-bd04-127c149e7364", "eventTime": "2017-05-27T03:07:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOE3WY5FIDFQYDEXU", "expiration": "May 27, 2017 4:07:33 AM", "sessionToken": "FQoDYXdzECQaDLJ4+kGvgTuMYL9WLyLMARIxE8R/lNwomZFQYgEHT6oQDCnXdRAKpcU3JZNgZR3lPAl1Rs2vP/wBf7NwpgwtL1PeBa6xk4FGYc7cVP8OCn/l0I2Cwppq+nx1XOZ53dQCGl6syWjjF8C5yu2U6nRDM0SVJ3Hu7tJTBES9Jb1d9S3GNBkUNivbQxxk8xzgxa2wP7RCAh347984xfAy+6H2KAIndjXWEfCxTHN4Z4gcqrcTBtWp4qgh1gZxI9OhzKOeeePlmbf3WBtGPx6/JFj7CYc4kpqENfgFvClxtUSj12qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ece4188-0251-4ce2-a2fa-db50bd745ef4", "record_id": "flaws_cloudtrail:0000241:5ece4188-0251-4ce2-a2fa-db50bd745ef4", "row_index": 241, "timestamp": "2017-05-27T03:07:33Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAW1JYJKQA7NP9BWAY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ece4188-0251-4ce2-a2fa-db50bd745ef4", "eventTime": "2017-05-27T03:07:33Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAW1JYJKQA7NP9BWAY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "745aa897-d7aa-40cb-afaa-4ae819f517c9", "record_id": "flaws_cloudtrail:0000242:745aa897-d7aa-40cb-afaa-4ae819f517c9", "row_index": 242, "timestamp": "2017-05-27T03:07:34Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAVMQ2GV337JZZEX66", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "745aa897-d7aa-40cb-afaa-4ae819f517c9", "eventTime": "2017-05-27T03:07:34Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAVMQ2GV337JZZEX66", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f5a742a-dc8d-481a-b036-fb8c22ef3e8f", "record_id": "flaws_cloudtrail:0000243:3f5a742a-dc8d-481a-b036-fb8c22ef3e8f", "row_index": 243, "timestamp": "2017-05-27T03:07:35Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAOVOSR6Q9TOBG5TTZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f5a742a-dc8d-481a-b036-fb8c22ef3e8f", "eventTime": "2017-05-27T03:07:35Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAOVOSR6Q9TOBG5TTZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad8737a1-d8f6-4146-94bf-4b9067ffaf5e", "record_id": "flaws_cloudtrail:0000244:ad8737a1-d8f6-4146-94bf-4b9067ffaf5e", "row_index": 244, "timestamp": "2017-05-27T03:07:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad8737a1-d8f6-4146-94bf-4b9067ffaf5e", "eventTime": "2017-05-27T03:07:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOVOSR6Q9TOBG5TTZ", "expiration": "May 27, 2017 4:07:35 AM", "sessionToken": "FQoDYXdzECQaDBUmETADxkz+O8EZJCLMAfXyhL2cEfiQssPoTzOyFMZ/+Rex2ymBUN/sqAzAeK2hVsQnWyhJjYbnyTGg3EazZLsTsqLC7vDpV8M5f7EkaHWuEZ+bla4IO8EArqkCGByoQR5KtnyXCIWnLZj1zW9Gri2fT+XxTMeK8BjHywtT5pR1CL26+4F74Lo8moLp4A6ZqIuDHAFqUM2GUy58jGHeOLz6tOBPpw0H3kEgl0pXVaubNVOVh5QCXaZ8DHXS7wSBhYLP9eyKTcyzToCKfwUI1Ugh6jHx7VUXo6PX3yj32qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff925e72-a464-49ae-b06d-8c7047b5708b", "record_id": "flaws_cloudtrail:0000245:ff925e72-a464-49ae-b06d-8c7047b5708b", "row_index": 245, "timestamp": "2017-05-27T03:07:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff925e72-a464-49ae-b06d-8c7047b5708b", "eventTime": "2017-05-27T03:07:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA1RPOVC837S0Z4DU", "expiration": "May 27, 2017 4:07:36 AM", "sessionToken": "FQoDYXdzECQaDHOPbSsFC85IhmNToyLMAVN88RrWdwPY+WjJwgxTYXvw6oNk/ZnshlgScKRcwE/AzX8izb+W8QqEao9Wl4KfvniKD65stra4s+WM1Sa3KI7EVKBhzIEz5bOJ9nz8lyYGt0GyGw8T45R02VBkiFAxm5IQT1xrqjE67XBPLMulF8//NQCfaNwKHuZZoAG+q+lDhGffJ5ZOkk0KiTdWyLmAR77ZW/pdPaQTko2aur21mD7vpZMAeEFzCbfTsDdFYcf7Ng2//HvZHCw2uZ0c0n6xrQWGyD1TQifSrQFzkij42qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b577c5cb-52da-4945-aa2b-d17d9825f7b4", "record_id": "flaws_cloudtrail:0000246:b577c5cb-52da-4945-aa2b-d17d9825f7b4", "row_index": 246, "timestamp": "2017-05-27T03:07:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b577c5cb-52da-4945-aa2b-d17d9825f7b4", "eventTime": "2017-05-27T03:07:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHHLO2UYCO1FRYF6L", "expiration": "May 27, 2017 4:07:37 AM", "sessionToken": "FQoDYXdzECQaDKHLs0p+boZpSXnsUSLMARoNyP/tC27dYB4eLC3dkWcVd21/0r3Tte3Ecr8KnppQKsxcTi6WOtOF0Ox25aVdlZYvjlZ27WBYgmwh0lS/azBiRPj8/P4SxOFMMPVj7b7IEu2hX8gEN5glNzU0Log5N2toQ1zWyms8SFrVwr+TjPLqdi2vtvRhxHfMKrj72k7yTaklKNtM9RlZFDGIm3cBAAPgb3YFWokLyDw3uBeShChX4YQoKMx0A1qACb08UsANmVSOw/H3RZCVLbl0y72vbht4NYFM6Ocwiv2BPij52qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bbafd35-fe6a-4c4a-abb9-7598d99c5584", "record_id": "flaws_cloudtrail:0000247:7bbafd35-fe6a-4c4a-abb9-7598d99c5584", "row_index": 247, "timestamp": "2017-05-27T03:07:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bbafd35-fe6a-4c4a-abb9-7598d99c5584", "eventTime": "2017-05-27T03:07:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0S3T5R1VE9BD7ZOA", "expiration": "May 27, 2017 4:07:38 AM", "sessionToken": "FQoDYXdzECQaDLiFgEX9F+kURKSK+CLMARD8+6v7PYHHRW2QVF22CqcxM3v4rnlpUrp0lDHei2qbmIPys4k5O3JZ4vrizZE7PYVH71lfqQkS6ckkReUa5HXkktSZrdttUI1qL7laF/XG4dV3YUc7oORi1bo6MOvwYEHiAXqyok1LitZHVwnXPrkgBj+SObr+NJp8LevKqAoknhFDYt+UXVEEBodTaBTQNtC2y+7BWU9BAO2vr0mhh9BklIyM2Deu67Lcooy1bpMoMA1yVtfC1RaqbnSYQrjzQV8wPYwnNmb77CI9jij62qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25ccb5a4-0616-41a7-a83a-ad86b2349b85", "record_id": "flaws_cloudtrail:0000248:25ccb5a4-0616-41a7-a83a-ad86b2349b85", "row_index": 248, "timestamp": "2017-05-27T03:07:38Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5S75PVY3QSTGI0BF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25ccb5a4-0616-41a7-a83a-ad86b2349b85", "eventTime": "2017-05-27T03:07:38Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5S75PVY3QSTGI0BF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "582bd640-57b5-4115-8de9-a09d76d442db", "record_id": "flaws_cloudtrail:0000249:582bd640-57b5-4115-8de9-a09d76d442db", "row_index": 249, "timestamp": "2017-05-27T03:07:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "582bd640-57b5-4115-8de9-a09d76d442db", "eventTime": "2017-05-27T03:07:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXFK3FRMVX1KPUAPZ", "expiration": "May 27, 2017 4:07:39 AM", "sessionToken": "FQoDYXdzECQaDJ1m/a74TG/javXgoyLMAdXsZzj1fGwcRwV8QTrdoH2oSmTgkGqSB9ceKt5RqD/uQP+45K6r185O9LJe769K2HdPR6OqLExjLl+pWJf+OyqPbnEZg+Hd8MGcTWRxTEQJlHQhUMMPcfCljbzSl1qgZGGVe1wRC/Hr9KrTk6kxvW0e/B7PBSstaO7c+iNAbzWl/munRn0STLOzJuqeog3Bs/s+pZol5x88TmXnepNuzyJYnUVEg9lFUQy3+WIKwhvfq/NCWnU7a83aiY0KLSJ5ysxavNmstyrWA8LHRCj72qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed1ae7e6-d765-4716-845e-1eedd9d3d02e", "record_id": "flaws_cloudtrail:0000250:ed1ae7e6-d765-4716-845e-1eedd9d3d02e", "row_index": 250, "timestamp": "2017-05-27T03:07:40Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATIJ5MAOVAOEBG1IM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed1ae7e6-d765-4716-845e-1eedd9d3d02e", "eventTime": "2017-05-27T03:07:40Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATIJ5MAOVAOEBG1IM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371df835-8e4e-4d19-850a-7889e78c1f85", "record_id": "flaws_cloudtrail:0000251:371df835-8e4e-4d19-850a-7889e78c1f85", "row_index": 251, "timestamp": "2017-05-27T03:07:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371df835-8e4e-4d19-850a-7889e78c1f85", "eventTime": "2017-05-27T03:07:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOIIDZ6Y40AICDBFQ", "expiration": "May 27, 2017 4:07:41 AM", "sessionToken": "FQoDYXdzECQaDNU19ko3sUCHQU/mpCLMAW1mqDSmwa0BLjVDu+w9X+/SrsaqOjXTUgeLv855kxvSa0ChGjVBOCJ6OfwH98EE0m6WwApk/WAPDyyoZonP9K78y2EnkSlBWnsf0GXlCGU7Q4CTM4HWSambZB0/IZnIEL6bQCktJezjhybsKc5TxgxPuNb2iGBV/Ena5nJi/ULH9zr0RVBdb/wb/Ty74+dt2kCzbJaAhEXpTZnCRPDa7ydn+bRKPu5NxFr1VRHPu3CezCNUVvi0p+ZkbUvYOvqbBShEzWCeStvv/6KsNij92qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fab2f03e-0adf-4666-b441-d470a8e3a82d", "record_id": "flaws_cloudtrail:0000252:fab2f03e-0adf-4666-b441-d470a8e3a82d", "row_index": 252, "timestamp": "2017-05-27T03:07:42Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATFZIG68955CGFWFM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fab2f03e-0adf-4666-b441-d470a8e3a82d", "eventTime": "2017-05-27T03:07:42Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATFZIG68955CGFWFM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c43053-9e83-4825-b24a-cfda36d603b2", "record_id": "flaws_cloudtrail:0000253:4c43053-9e83-4825-b24a-cfda36d603b2", "row_index": 253, "timestamp": "2017-05-27T03:07:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c43053-9e83-4825-b24a-cfda36d603b2", "eventTime": "2017-05-27T03:07:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAIUKBN88WDQGP4A4", "expiration": "May 27, 2017 4:07:42 AM", "sessionToken": "FQoDYXdzECQaDARvJ1bHwnScxO0xdSLMATXpR0L7nGFtDjdP1wIFg+2iU3umsjd2ok+b7VN9gDTNMJ3Thv1n9udrctX9z9W1Rhb1KJBiulXFcyDM5SpsjhC1GMVC8ZsaUcXTJESi+9mcpGceouCU3duY3jya54kY6Mu1ry7VXaobttTyvwCC3EMfWhZ65i/vLYmdD+IXBjxVHwOBPxcgnvojG8m1JX7B3qF3chG8xJVPV4nYPvdup5jqGWP06mWUoqzG7i8hM6xREqcz8ywyBEDoANAifVCyuTr7JZ/rY+EFt1LX/yj+2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8631ea31-b607-4707-bdf1-37e6795df307", "record_id": "flaws_cloudtrail:0000254:8631ea31-b607-4707-bdf1-37e6795df307", "row_index": 254, "timestamp": "2017-05-27T03:07:43Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAB26CPH1D0X3ZE3R6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8631ea31-b607-4707-bdf1-37e6795df307", "eventTime": "2017-05-27T03:07:43Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAB26CPH1D0X3ZE3R6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a72f4d-f6ef-43b1-956a-2daacce5c044", "record_id": "flaws_cloudtrail:0000255:02a72f4d-f6ef-43b1-956a-2daacce5c044", "row_index": 255, "timestamp": "2017-05-27T03:07:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a72f4d-f6ef-43b1-956a-2daacce5c044", "eventTime": "2017-05-27T03:07:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0LUXCVGW8H82NZXD", "expiration": "May 27, 2017 4:07:43 AM", "sessionToken": "FQoDYXdzECQaDP02zlFwbpEKjCFElSLMAWUk9ci7PaXAHrINEF+NVVdzrqgllSjepHmbJ0oEb8DAdpi/vd0M1Q3xXmwTadkmYZjvV9qjKaWt4g4IKBUttry+vc7DkNtlME4JL9naD4dc9BX0tyEG1Mp7arQzXivJfUkwUiiHqQKC2l02SBKyBP8GDiyVk3flrD2SD6Xstjelg6guyZB5BAMhTxihI9nsIlIKyEX+EAv+V3mAr7qK414+3FrekuQ82yRPyfsaA9I0r1kwJJE7TOv5EapJHsO3yJ8bTKMowQ80gg8WRCj/2qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e66542b9-09db-4cb5-8989-adeba10af05e", "record_id": "flaws_cloudtrail:0000256:e66542b9-09db-4cb5-8989-adeba10af05e", "row_index": 256, "timestamp": "2017-05-27T03:07:44Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0LUXCVGW8H82NZXD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e66542b9-09db-4cb5-8989-adeba10af05e", "eventTime": "2017-05-27T03:07:44Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0LUXCVGW8H82NZXD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8869aea2-a77c-48c5-8d79-30b136d69de4", "record_id": "flaws_cloudtrail:0000257:8869aea2-a77c-48c5-8d79-30b136d69de4", "row_index": 257, "timestamp": "2017-05-27T03:07:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8869aea2-a77c-48c5-8d79-30b136d69de4", "eventTime": "2017-05-27T03:07:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3061EG29PS0HDOLO", "expiration": "May 27, 2017 4:07:44 AM", "sessionToken": "FQoDYXdzECQaDKDKDjeB24Qn2v1NZyLMAc131SgBv6IEhpZhL7LyVPS+lT23p31u1ff0kmFJFwY/U3dk9XWoK691N57zn+0WDEmr7w6i4Fdwg9bkimVVaG/MfsmyrQdYSIahMR/7FJ05YPpBZTQ9qTQ6HSsrtgWUwimxB5u5s5MHbtrShcNe3nqoDVtCn/3uth/7kprEPP6qc+ESgRlzKEUCxNFkM3YyCELdre8Y5haJPKOpFDE9NMW8FE1wwZ4vryvE64xsB1FudsjEAYuW+OPwpEEPoBe+8jlCmhswZc+LA7Q60yiA26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e21220-e1ae-420a-81fb-2022f863e475", "record_id": "flaws_cloudtrail:0000258:19e21220-e1ae-420a-81fb-2022f863e475", "row_index": 258, "timestamp": "2017-05-27T03:07:46Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e21220-e1ae-420a-81fb-2022f863e475", "eventTime": "2017-05-27T03:07:46Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "182772e0d-ce9b-4655-9331-18e8039dc01a", "record_id": "flaws_cloudtrail:0000259:182772e0d-ce9b-4655-9331-18e8039dc01a", "row_index": 259, "timestamp": "2017-05-27T03:07:47Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "182772e0d-ce9b-4655-9331-18e8039dc01a", "eventTime": "2017-05-27T03:07:47Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4b11702-d71e-40de-85b5-5d56eeba9959", "record_id": "flaws_cloudtrail:0000260:d4b11702-d71e-40de-85b5-5d56eeba9959", "row_index": 260, "timestamp": "2017-05-27T03:07:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4b11702-d71e-40de-85b5-5d56eeba9959", "eventTime": "2017-05-27T03:07:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717f574a-a0ff-4f8c-a343-ffa6b17491f", "record_id": "flaws_cloudtrail:0000261:717f574a-a0ff-4f8c-a343-ffa6b17491f", "row_index": 261, "timestamp": "2017-05-27T03:07:50Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717f574a-a0ff-4f8c-a343-ffa6b17491f", "eventTime": "2017-05-27T03:07:50Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e390517e9-c329-44d6-bffc-920388ea0721", "record_id": "flaws_cloudtrail:0000262:e390517e9-c329-44d6-bffc-920388ea0721", "row_index": 262, "timestamp": "2017-05-27T03:07:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e390517e9-c329-44d6-bffc-920388ea0721", "eventTime": "2017-05-27T03:07:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5af56e5-4de8-4bd2-adcb-e99740ac691d", "record_id": "flaws_cloudtrail:0000263:e5af56e5-4de8-4bd2-adcb-e99740ac691d", "row_index": 263, "timestamp": "2017-05-27T03:07:52Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5af56e5-4de8-4bd2-adcb-e99740ac691d", "eventTime": "2017-05-27T03:07:52Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f623170e-a797-4c12-8e9d-37aade3c8fb2", "record_id": "flaws_cloudtrail:0000264:0f623170e-a797-4c12-8e9d-37aade3c8fb2", "row_index": 264, "timestamp": "2017-05-27T03:07:52Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f623170e-a797-4c12-8e9d-37aade3c8fb2", "eventTime": "2017-05-27T03:07:52Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18737-ca24-444d-8636-d0ffb1cb6f04", "record_id": "flaws_cloudtrail:0000265:f18737-ca24-444d-8636-d0ffb1cb6f04", "row_index": 265, "timestamp": "2017-05-27T03:07:53Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18737-ca24-444d-8636-d0ffb1cb6f04", "eventTime": "2017-05-27T03:07:53Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fa6100-4530-4802-b540-7a6e67fe5d59", "record_id": "flaws_cloudtrail:0000266:d1fa6100-4530-4802-b540-7a6e67fe5d59", "row_index": 266, "timestamp": "2017-05-27T03:07:54Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fa6100-4530-4802-b540-7a6e67fe5d59", "eventTime": "2017-05-27T03:07:54Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34cede6a-935b-474b-bf6a-96552e0e3c4a", "record_id": "flaws_cloudtrail:0000267:34cede6a-935b-474b-bf6a-96552e0e3c4a", "row_index": 267, "timestamp": "2017-05-27T03:07:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34cede6a-935b-474b-bf6a-96552e0e3c4a", "eventTime": "2017-05-27T03:07:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "286f7d0b-b5b0-4f7c-bf12-29f032d83a8a", "record_id": "flaws_cloudtrail:0000268:286f7d0b-b5b0-4f7c-bf12-29f032d83a8a", "row_index": 268, "timestamp": "2017-05-27T03:07:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "286f7d0b-b5b0-4f7c-bf12-29f032d83a8a", "eventTime": "2017-05-27T03:07:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0f5b4b-015a-4134-afea-e7fd72bb53bb", "record_id": "flaws_cloudtrail:0000269:5e0f5b4b-015a-4134-afea-e7fd72bb53bb", "row_index": 269, "timestamp": "2017-05-27T03:07:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0f5b4b-015a-4134-afea-e7fd72bb53bb", "eventTime": "2017-05-27T03:07:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d439315-c636-47df-9a2b-0c25fa2532db", "record_id": "flaws_cloudtrail:0000270:0d439315-c636-47df-9a2b-0c25fa2532db", "row_index": 270, "timestamp": "2017-05-27T03:07:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d439315-c636-47df-9a2b-0c25fa2532db", "eventTime": "2017-05-27T03:07:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d662e01e-29f8-4d94-9860-809d3e87a28b", "record_id": "flaws_cloudtrail:0000271:d662e01e-29f8-4d94-9860-809d3e87a28b", "row_index": 271, "timestamp": "2017-05-27T03:07:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3061EG29PS0HDOLO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d662e01e-29f8-4d94-9860-809d3e87a28b", "eventTime": "2017-05-27T03:07:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3061EG29PS0HDOLO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3facc5-4348-4d69-ad97-d12a0427cf29", "record_id": "flaws_cloudtrail:0000272:ec3facc5-4348-4d69-ad97-d12a0427cf29", "row_index": 272, "timestamp": "2017-05-27T03:07:58Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3facc5-4348-4d69-ad97-d12a0427cf29", "eventTime": "2017-05-27T03:07:58Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6437e24-28f5-4317-8f7f-3618826cf3e0", "record_id": "flaws_cloudtrail:0000273:e6437e24-28f5-4317-8f7f-3618826cf3e0", "row_index": 273, "timestamp": "2017-05-27T03:07:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6437e24-28f5-4317-8f7f-3618826cf3e0", "eventTime": "2017-05-27T03:07:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEMP9IR73PRO00D24", "expiration": "May 27, 2017 4:07:58 AM", "sessionToken": "FQoDYXdzECQaDBoyn9FYTE8wkqbxeCLMAXL4PeZEBZms1x/WAZNLznoHy7Nwr30yyktPu8fnmhY37QfPhry8frXmPRIlzOyn/XKjrF1fGVH/eOT9OkjjD9kGnVvPma4qYq5z0SPUzP/znyu8KhP75Kqg1YTUQ33GLOcG0EcO6S/5MZ7J0hKvyq0meZP5A8V1Qt7Bq0NCa3I9xSSY9EcbuE1SDvhwVuUrnH8ZoU/0f7pJMat5YLTl0FAYQ9XCauqqUHJfmk9FH9xBJ/jnNm8ehYOEvKSg0utwMTwgPfNU/0uQEEPv7SiO26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "758096d-0eb2-4a81-a5ac-f576828d43a4", "record_id": "flaws_cloudtrail:0000274:758096d-0eb2-4a81-a5ac-f576828d43a4", "row_index": 274, "timestamp": "2017-05-27T03:08:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "758096d-0eb2-4a81-a5ac-f576828d43a4", "eventTime": "2017-05-27T03:08:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f03e610a-2a18-48ef-a305-bb97d190046b", "record_id": "flaws_cloudtrail:0000275:f03e610a-2a18-48ef-a305-bb97d190046b", "row_index": 275, "timestamp": "2017-05-27T03:08:01Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f03e610a-2a18-48ef-a305-bb97d190046b", "eventTime": "2017-05-27T03:08:01Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a4c143f-db4a-4280-b25f-38ce5edc1f7c", "record_id": "flaws_cloudtrail:0000276:9a4c143f-db4a-4280-b25f-38ce5edc1f7c", "row_index": 276, "timestamp": "2017-05-27T03:08:02Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a4c143f-db4a-4280-b25f-38ce5edc1f7c", "eventTime": "2017-05-27T03:08:02Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f5b44fc-4fab-4697-84a7-40fc13ebec17", "record_id": "flaws_cloudtrail:0000277:6f5b44fc-4fab-4697-84a7-40fc13ebec17", "row_index": 277, "timestamp": "2017-05-27T03:08:04Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f5b44fc-4fab-4697-84a7-40fc13ebec17", "eventTime": "2017-05-27T03:08:04Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2d1f48-0aeb-4ad4-a782-5518b138b04e", "record_id": "flaws_cloudtrail:0000278:7e2d1f48-0aeb-4ad4-a782-5518b138b04e", "row_index": 278, "timestamp": "2017-05-27T03:08:04Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2d1f48-0aeb-4ad4-a782-5518b138b04e", "eventTime": "2017-05-27T03:08:04Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65c07f20-3bdc-4305-8b6d-c15844b1c241", "record_id": "flaws_cloudtrail:0000279:65c07f20-3bdc-4305-8b6d-c15844b1c241", "row_index": 279, "timestamp": "2017-05-27T03:08:05Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65c07f20-3bdc-4305-8b6d-c15844b1c241", "eventTime": "2017-05-27T03:08:05Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1938fe9d-6024-4c14-85b4-a1140aaab2aa", "record_id": "flaws_cloudtrail:0000280:1938fe9d-6024-4c14-85b4-a1140aaab2aa", "row_index": 280, "timestamp": "2017-05-27T03:08:06Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1938fe9d-6024-4c14-85b4-a1140aaab2aa", "eventTime": "2017-05-27T03:08:06Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25d4a6e9-dc37-405c-8297-17ff108cb146", "record_id": "flaws_cloudtrail:0000281:25d4a6e9-dc37-405c-8297-17ff108cb146", "row_index": 281, "timestamp": "2017-05-27T03:08:07Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25d4a6e9-dc37-405c-8297-17ff108cb146", "eventTime": "2017-05-27T03:08:07Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee86c400-0012-4589-a352-20603ffede4", "record_id": "flaws_cloudtrail:0000282:ee86c400-0012-4589-a352-20603ffede4", "row_index": 282, "timestamp": "2017-05-27T03:08:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee86c400-0012-4589-a352-20603ffede4", "eventTime": "2017-05-27T03:08:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f818c997-b333-454e-9ef4-8823bfd3b5ed", "record_id": "flaws_cloudtrail:0000283:f818c997-b333-454e-9ef4-8823bfd3b5ed", "row_index": 283, "timestamp": "2017-05-27T03:08:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f818c997-b333-454e-9ef4-8823bfd3b5ed", "eventTime": "2017-05-27T03:08:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21cca2aa-5d2c-4b2a-b115-c3b1174e0c9f", "record_id": "flaws_cloudtrail:0000284:21cca2aa-5d2c-4b2a-b115-c3b1174e0c9f", "row_index": 284, "timestamp": "2017-05-27T03:08:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21cca2aa-5d2c-4b2a-b115-c3b1174e0c9f", "eventTime": "2017-05-27T03:08:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c8988c-f41d-42d8-868c-930210abcac6", "record_id": "flaws_cloudtrail:0000285:f9c8988c-f41d-42d8-868c-930210abcac6", "row_index": 285, "timestamp": "2017-05-27T03:08:10Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c8988c-f41d-42d8-868c-930210abcac6", "eventTime": "2017-05-27T03:08:10Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88b6dc9e-e660-4afa-a3d8-e740e7f16e5e", "record_id": "flaws_cloudtrail:0000286:88b6dc9e-e660-4afa-a3d8-e740e7f16e5e", "row_index": 286, "timestamp": "2017-05-27T03:08:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88b6dc9e-e660-4afa-a3d8-e740e7f16e5e", "eventTime": "2017-05-27T03:08:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABPELFI0K1GX27IPI", "expiration": "May 27, 2017 4:08:11 AM", "sessionToken": "FQoDYXdzECQaDLUsVumJWpCkyvuKjiLMARCIB1RHd2T34btAa0PKSppTQvgjiJBaCpLG2Z71xQJQzzCLVZR/rqK1f18oP+gLgkapWGhYD+3sLb2SupRGRA6XEweKimhhcNEi3JiqqVb75rByrIeL75GgImsia5qNhlURF89LBAWPZuicWKD6lVrA/wM0uXMo4XCgWImw0QXeR+6wHQCYkcn3l13Y4+enR2EjkpdqAull9rP0ueOY/+BGtZvees8RNdQG+pZj3zqcx2eCEI0fU3gg7aLwfBdCrJSBLU3c+mMqh4r/XCib26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43aa6348-7002-4e1e-8485-6080eff16e93", "record_id": "flaws_cloudtrail:0000287:43aa6348-7002-4e1e-8485-6080eff16e93", "row_index": 287, "timestamp": "2017-05-27T03:08:11Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABPELFI0K1GX27IPI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43aa6348-7002-4e1e-8485-6080eff16e93", "eventTime": "2017-05-27T03:08:11Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABPELFI0K1GX27IPI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3b06e40-f6ce-4d3f-8a64-c153b4a27a00", "record_id": "flaws_cloudtrail:0000288:b3b06e40-f6ce-4d3f-8a64-c153b4a27a00", "row_index": 288, "timestamp": "2017-05-27T03:08:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEMP9IR73PRO00D24", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3b06e40-f6ce-4d3f-8a64-c153b4a27a00", "eventTime": "2017-05-27T03:08:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEMP9IR73PRO00D24", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:07:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27179e67-15e1-4c42-97eb-169742fdfe1e", "record_id": "flaws_cloudtrail:0000289:27179e67-15e1-4c42-97eb-169742fdfe1e", "row_index": 289, "timestamp": "2017-05-27T03:08:12Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG6LD2X83YGWZHFAC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27179e67-15e1-4c42-97eb-169742fdfe1e", "eventTime": "2017-05-27T03:08:12Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG6LD2X83YGWZHFAC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f06b7a1-5279-4679-b388-8abdfa635278c", "record_id": "flaws_cloudtrail:0000290:1f06b7a1-5279-4679-b388-8abdfa635278c", "row_index": 290, "timestamp": "2017-05-27T03:08:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f06b7a1-5279-4679-b388-8abdfa635278c", "eventTime": "2017-05-27T03:08:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG6LD2X83YGWZHFAC", "expiration": "May 27, 2017 4:08:12 AM", "sessionToken": "FQoDYXdzECQaDK32VYVHhbB7NifhgSLMAVOtu64ZxBm/SpLkHTu/Jolg7cZnZoRKjnV2Rq0Ckbc20fdOfmnMUzBtssFn8JmnkZ0FJCKXg7NEgArC1moUbb3qel5WXWiBe4jZH/+ISzSItuWHgEVxGw9F1hQ0fSkwj4HXIu0wjRl07zw4ZMgM95g22AqXFHNY1MwkqnF6gfnVmXrYgBNECQsDi7bg1+yxvzrFsIN0p8c30wbxYqkZadadNyfgmHLjnQUnvlDdmOEkihC78Bi5iWiYPR6leAl1K4dDSe3dUVShNb7tviic26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5ff25d9-e0b2-4336-8402-02d625dd45ef", "record_id": "flaws_cloudtrail:0000291:f5ff25d9-e0b2-4336-8402-02d625dd45ef", "row_index": 291, "timestamp": "2017-05-27T03:08:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5ff25d9-e0b2-4336-8402-02d625dd45ef", "eventTime": "2017-05-27T03:08:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALV2CSP8YN313N931", "expiration": "May 27, 2017 4:08:13 AM", "sessionToken": "FQoDYXdzECQaDEXIPBMwz5j8HEQt0SLMASJroVjEs6MvwANnobThu9I9SadT67FlQPWHNYrnrJuoUUp3tIXnkBwjinDHnvzh4mRCd0TheBYk2QK+bWSFrSPxBxZ1ilhaKXGNT2/D1YzaVtQzF5+C0WWX/61aRr3xWiJXA7bUphb9tUVoIVAqTOlTEhuCYwkx2rKfiIeJxhbheSAwvybV7KM0dt9PWaI9PcV9RFJ8aRGFppre6I2HMoUyGQi1u2r0W1zdObgo5VpDFMCIzwttl25kddAUtMitn6gxGyJvQemdG98uiiid26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3811b73c-aeb6-4231-b335-a1f3a3ef87aa", "record_id": "flaws_cloudtrail:0000292:3811b73c-aeb6-4231-b335-a1f3a3ef87aa", "row_index": 292, "timestamp": "2017-05-27T03:08:14Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALV2CSP8YN313N931", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3811b73c-aeb6-4231-b335-a1f3a3ef87aa", "eventTime": "2017-05-27T03:08:14Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALV2CSP8YN313N931", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "916a1e81-e662-46c9-8a5f-e54dafcdcda6", "record_id": "flaws_cloudtrail:0000293:916a1e81-e662-46c9-8a5f-e54dafcdcda6", "row_index": 293, "timestamp": "2017-05-27T03:08:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "916a1e81-e662-46c9-8a5f-e54dafcdcda6", "eventTime": "2017-05-27T03:08:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU9UDKCTET730WOLA", "expiration": "May 27, 2017 4:08:14 AM", "sessionToken": "FQoDYXdzECQaDH71W/9BT3vnlhUb5iLMAQN+7+73k7BZ+5mPNUlajUSK6Q9KojY3xJY1oWEcLcegc6BTSC2tNk1+/DCGmSVmfQW78Z2eB9vrMB+RV/tcJL86FDBUzxYlkXPvBtiMk0IAwBs03jnQggx4CjiuDzKxdLxz4El+0jJqBgtV5pWeRhcOnMUiD4ebRo1lR6udMrDI+LbPllMUtRt3L7Ei5gyexKqpJDFn9WCJ9w3gvVLF5+LAKcV9WSfEaaPis8LTuorXmahBFo3V84S3Z1u8HpAvuJK41XZcyJ4hej1AYyie26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3155c10e-d7e3-403b-8cb5-2fc7ba98c4c4", "record_id": "flaws_cloudtrail:0000294:3155c10e-d7e3-403b-8cb5-2fc7ba98c4c4", "row_index": 294, "timestamp": "2017-05-27T03:08:15Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU9UDKCTET730WOLA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3155c10e-d7e3-403b-8cb5-2fc7ba98c4c4", "eventTime": "2017-05-27T03:08:15Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU9UDKCTET730WOLA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cd7e977-a564-4579-8cec-7ef43068b317", "record_id": "flaws_cloudtrail:0000295:0cd7e977-a564-4579-8cec-7ef43068b317", "row_index": 295, "timestamp": "2017-05-27T03:08:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cd7e977-a564-4579-8cec-7ef43068b317", "eventTime": "2017-05-27T03:08:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ1T84NWBMG7F9CD5", "expiration": "May 27, 2017 4:08:16 AM", "sessionToken": "FQoDYXdzECQaDEL8+JP08oMnEbTgaCLMAeUXWPFoF6+BoXV08KFHsXxB8QdGXCB0IMEr5S+IT7qoJ34zQFbhje5fD0xp4IPhtK+LtMRZsNuGLUd7lVrJCUNu0jpifTu10a+H4I+iIKVO1lA9S2hRn+GxR6DJrQHhTL8vvQon0eW7C6Y6L5FvZQcEAcmx57Vgp0FCwK3pYeZkgONlENIHy/dY7/Es9AhKNQaVCJS/CIfKCJZEIa2EI/c8cG188gDCMlcTDTYzPRoJfuepRxn1bVTagpOcSJynspoUtQbwChGKBflQJCig26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07134a44-2b05-4b88-8ccc-357614e7a4cc", "record_id": "flaws_cloudtrail:0000296:07134a44-2b05-4b88-8ccc-357614e7a4cc", "row_index": 296, "timestamp": "2017-05-27T03:08:17Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ1T84NWBMG7F9CD5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07134a44-2b05-4b88-8ccc-357614e7a4cc", "eventTime": "2017-05-27T03:08:17Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ1T84NWBMG7F9CD5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fabd659-bdaf-4c6c-a4c8-a2a0b2db6a0f", "record_id": "flaws_cloudtrail:0000297:6fabd659-bdaf-4c6c-a4c8-a2a0b2db6a0f", "row_index": 297, "timestamp": "2017-05-27T03:08:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fabd659-bdaf-4c6c-a4c8-a2a0b2db6a0f", "eventTime": "2017-05-27T03:08:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV31DZQZY03CT8HL0", "expiration": "May 27, 2017 4:08:17 AM", "sessionToken": "FQoDYXdzECQaDDgervZl02IGUYeinCLMAYWCCi0vXZqOhQhRj5Lj/z+pJnR+iVE5xkrKWPkTmObVzu6nf8K15+erf7Ug7S8u2/vhsaWhttGoRkjOuq8sF74BqeiCsbYjKRscLsVlsLSA6pdlD7IGGQ1zD1/W2rJ+jyrj00V0BfIfxN6oXZFK8x4/D8K950x1RKwJiLo2TdpIex/j3bc5eGiU4E2WUwhxs7fGl2kiiicwltTyHYOW0r3rqSXocfuTg5ocUOPd0Xnpo9ZQZLo/vCuDdu7LxJ15pdFtVaeD8zIb3cULwSih26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3599d621-5363-44a2-b91d-2c59229b1b88", "record_id": "flaws_cloudtrail:0000298:3599d621-5363-44a2-b91d-2c59229b1b88", "row_index": 298, "timestamp": "2017-05-27T03:08:18Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV31DZQZY03CT8HL0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3599d621-5363-44a2-b91d-2c59229b1b88", "eventTime": "2017-05-27T03:08:18Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV31DZQZY03CT8HL0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c8d65b4-6e0d-4b9b-972b-081215d4de35", "record_id": "flaws_cloudtrail:0000299:3c8d65b4-6e0d-4b9b-972b-081215d4de35", "row_index": 299, "timestamp": "2017-05-27T03:08:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c8d65b4-6e0d-4b9b-972b-081215d4de35", "eventTime": "2017-05-27T03:08:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZQ1RIYUYUJ38YD3Y", "expiration": "May 27, 2017 4:08:18 AM", "sessionToken": "FQoDYXdzECQaDN2GQ4wMjcIlaPygrCLMAdzBt4bQYInz6PALTDetHsaUSX67UBkkoX1tudrp6nV/bwjxIBKSfMho2orMewAEhTiewqcr5IkaK8INyCMVYiodNLcsYhUgUuxzhCa4kry/4iGj8kWL7cL13z4TSu+Xv9itFcrqTsE2q2d5RhOtSn7r72cTyRUQreLvnJ85x3vsOz1xC4H6a0R5IOkHzCJ98Ik7t1UUsd/q3JIpTVM+BkbhQkvioYd6T2pBVYnHx/OyrM/gJADl5gpXvwpUFwrg6nmUZjYJY+aRFigiWCii26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ed181f5-fcbc-45f5-964e-42c4b8273cdb", "record_id": "flaws_cloudtrail:0000300:9ed181f5-fcbc-45f5-964e-42c4b8273cdb", "row_index": 300, "timestamp": "2017-05-27T03:08:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ed181f5-fcbc-45f5-964e-42c4b8273cdb", "eventTime": "2017-05-27T03:08:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVDX74CKC3KOHUT7I", "expiration": "May 27, 2017 4:08:19 AM", "sessionToken": "FQoDYXdzECQaDFo/1o2a7AJc7t9jbSLMAcU0Z1hnpnXmlaCkzjMHJXiHKOiJQPGuMupUq8PA8g9gWu503EX86dRMtb6cZqxL+qvBgd06xZPVVtduZa8mQubDlYOkRAzW3GSbEp6uG7QxOMaelui51vANXSce2HZJ9Y2ZPkC9Ua5IuqUTZO2bZzVxLEulDq0Ln6mRX6RqAz0MRIxFD8WTEsm5jFZZZzWI/m8hyv8ABexehH5y75lTmKVfnEHceqAGo00DwyN5+7SrpxtcXf0mfWX+2W1vUWaDiYGBrirpM8lwjrmLXyij26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b694fcfa-202a-47f3-bfab-1a6032e35644", "record_id": "flaws_cloudtrail:0000301:b694fcfa-202a-47f3-bfab-1a6032e35644", "row_index": 301, "timestamp": "2017-05-27T03:08:19Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZQ1RIYUYUJ38YD3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b694fcfa-202a-47f3-bfab-1a6032e35644", "eventTime": "2017-05-27T03:08:19Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZQ1RIYUYUJ38YD3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e010d9-731e-4668-8bf7-e1731bb0f73e", "record_id": "flaws_cloudtrail:0000302:20e010d9-731e-4668-8bf7-e1731bb0f73e", "row_index": 302, "timestamp": "2017-05-27T03:08:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAVDX74CKC3KOHUT7I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e010d9-731e-4668-8bf7-e1731bb0f73e", "eventTime": "2017-05-27T03:08:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAVDX74CKC3KOHUT7I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd60934e-f27f-423f-8dea-7f7665047c85", "record_id": "flaws_cloudtrail:0000303:dd60934e-f27f-423f-8dea-7f7665047c85", "row_index": 303, "timestamp": "2017-05-27T03:08:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd60934e-f27f-423f-8dea-7f7665047c85", "eventTime": "2017-05-27T03:08:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARWJZZT89I6CVPQBC", "expiration": "May 27, 2017 4:08:21 AM", "sessionToken": "FQoDYXdzECQaDCc8h/3vN5I7qEKijCLMAdL9l/+7zgCg80uizDgPU6JHQG4DRxFdtpQ8l97BYqkMEjkD1ilcxS/M2UPQZZVX0I/uRgOHdl/D2uHVCwDXcKbz1GbM60VJ7jyYra3DwiXxDWfW5LVuLH1cqmxM/vTGbnu0wytcCbJ84lriwqof4hWriS+kQ8h9JVjF74Y16cyoQ+kJc7fWs1Oj9Q2DGB2CGewp8gi4R5eIGdlDxIqbnsI1yZ/nU748jdUSzBllaFAUYhjZ/lfMwYhO7zjlgzGix/pw3g+w2INwbDns7yil26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f4b83e-e4db-434f-a64d-c3c35e818caf", "record_id": "flaws_cloudtrail:0000304:69f4b83e-e4db-434f-a64d-c3c35e818caf", "row_index": 304, "timestamp": "2017-05-27T03:08:22Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARWJZZT89I6CVPQBC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f4b83e-e4db-434f-a64d-c3c35e818caf", "eventTime": "2017-05-27T03:08:22Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARWJZZT89I6CVPQBC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70df2b2f-b54c-443f-8ce3-94fb4905e463", "record_id": "flaws_cloudtrail:0000305:70df2b2f-b54c-443f-8ce3-94fb4905e463", "row_index": 305, "timestamp": "2017-05-27T03:08:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70df2b2f-b54c-443f-8ce3-94fb4905e463", "eventTime": "2017-05-27T03:08:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYB0S5BI1TSFQI4K8", "expiration": "May 27, 2017 4:08:22 AM", "sessionToken": "FQoDYXdzECQaDGrZxqMXOYV4qmX18SLMAeKUp5LHSJbvdaEFyZIOFk/FiZ4uAxWH5g5b0iW1bk59ZzIVFo6NeovjQo4fDTN3wde77hqixsJTztJGG7ZiXo7x9JbHT/6E2H7A9/sGeTJqW6PjNQPJDn6BMKT8Rkl1Yq9LCiRZimC2sNT+DWEg4a9MQ1j8EJRvIcJdFvD4Nn57K2lqQ26WsBJZOJa00UmPWUyWziaRTSOktiuP9T+x8TfsLzipt++M6Fosmk8CNx83scqNxEadwdnuJu10MuT6+m2U+rHecfgNTtydLiim26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd91587b-f9b4-40ea-b7e0-bf5fba5be19a", "record_id": "flaws_cloudtrail:0000306:bd91587b-f9b4-40ea-b7e0-bf5fba5be19a", "row_index": 306, "timestamp": "2017-05-27T03:08:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd91587b-f9b4-40ea-b7e0-bf5fba5be19a", "eventTime": "2017-05-27T03:08:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYOY09Q0JJCZ5JRYN", "expiration": "May 27, 2017 4:08:24 AM", "sessionToken": "FQoDYXdzECQaDNsi0taUmyguWwwUECLMAY8F+e4+E1c5LtsRG8Ij0M07VT5F130W58CTXIHJgGyLJYV3GE6lbgdmbysllSg7jachmhvGqVl/Y0vNtUlPTcNSei+rvt6uon8SIS9l3XbQvujf+BkSoFkSMQbFXrxJfK8oZCFq4J041qIdgl8VwT+jZoNqk8l/VNmy2LPTw0Ti2ituoRUCY7FtkdyykdqP1o2vYlq+TIitrjmiCv5WsO4KFbfmeI9dPV6RxSgMcy5/VURdtOzPqwTUh3tNp4Hjpu9L50t94WJAIzNxAyio26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac79235d-4699-47e7-ac2f-11fe1284854a", "record_id": "flaws_cloudtrail:0000307:ac79235d-4699-47e7-ac2f-11fe1284854a", "row_index": 307, "timestamp": "2017-05-27T03:08:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac79235d-4699-47e7-ac2f-11fe1284854a", "eventTime": "2017-05-27T03:08:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYDH1R98ZB9AJESVN", "expiration": "May 27, 2017 4:08:25 AM", "sessionToken": "FQoDYXdzECQaDEiWs6AAXKpT0njJgCLMAZuI2DTbvt8hVvyOrNPopf5S3EhCABDHxfIV+L5xITSXZHTN5ydhVnpZWayi5xe2VyMlP7yvuL/ckxrxwTW8LOwwycgBtsYGUbXzCgabhkFPZvdk6um/yEhWufPy6ODyg75t5vWsC1R4mYknXDc/kC2x6JW+9vvRSyQbuETjR8vss9FO/5PBMY/emUL6aifBSB2ZhsxzSMfLorvJp7ddPH+IiegToQ9WndEZIEnCLtVlFhrvp3y2kCiCcKaWZM2BnUpzhxt4GIlcm7XHqiip26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51f90d06-796d-4d82-bbc5-565a42e5c607", "record_id": "flaws_cloudtrail:0000308:51f90d06-796d-4d82-bbc5-565a42e5c607", "row_index": 308, "timestamp": "2017-05-27T03:08:25Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYOY09Q0JJCZ5JRYN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51f90d06-796d-4d82-bbc5-565a42e5c607", "eventTime": "2017-05-27T03:08:25Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYOY09Q0JJCZ5JRYN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "385d72b5-33c0-47db-a9f0-29cb81cde66e", "record_id": "flaws_cloudtrail:0000309:385d72b5-33c0-47db-a9f0-29cb81cde66e", "row_index": 309, "timestamp": "2017-05-27T03:08:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "385d72b5-33c0-47db-a9f0-29cb81cde66e", "eventTime": "2017-05-27T03:08:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9C8Q477R170H2S1D", "expiration": "May 27, 2017 4:08:26 AM", "sessionToken": "FQoDYXdzECQaDO8ksOoHszxqgN7C3CLMAYyxMkUKLg6ZeF+UkND649Vc3Ih+So9MO8gu8DpHZayfr5S43mw9FvgN1mAJMuIBF/4mrOEK4U0nmTYgwXn/kkzhZ19spAo5Kz+ud6Z7xWS2Z3Acdnd1gUnQpA4t28xTkaEdqKTHLsRfNgT/rXPf4ijr9wvFqoF6lhAogFEL9CPIs1GaTOl0xkxLaghEYUqKnfRUBY0X53SPB4/d6jEdEm6LNvQWzwegGNqeXkHpw6BZiOw9GDMz0wSCMAtYj6sJ1XgTRr+ufrR0S5Ju6Ciq26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9f9660c-eb51-48e8-9487-260171dca161d", "record_id": "flaws_cloudtrail:0000310:f9f9660c-eb51-48e8-9487-260171dca161d", "row_index": 310, "timestamp": "2017-05-27T03:08:27Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9C8Q477R170H2S1D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9f9660c-eb51-48e8-9487-260171dca161d", "eventTime": "2017-05-27T03:08:27Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9C8Q477R170H2S1D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:26Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cba6d46d-48c9-466e-bd50-627baa922c5e", "record_id": "flaws_cloudtrail:0000311:cba6d46d-48c9-466e-bd50-627baa922c5e", "row_index": 311, "timestamp": "2017-05-27T03:08:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cba6d46d-48c9-466e-bd50-627baa922c5e", "eventTime": "2017-05-27T03:08:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI895GKMSM13JW2J1", "expiration": "May 27, 2017 4:08:28 AM", "sessionToken": "FQoDYXdzECQaDDxJdzBMLdv2hiAHNyLMAQ4dOJqt9aj0vpcACWesW7sSMrpUS2pDy4EJfA5ghCr4g5FKB1bya7odVirEOR1tDULTMSjSC+kahwgSmkV6vOTo0ieyKZghS6ml4TwjP+lE3MjU3onCssPsT4pQK7mTlEbTUjMqz2MUaRV7J64IAK/TCJcHhkgf8YI6Bmpg00xLGbjcU4MDE++7KuWyknGZqBfbQsn4Tc9dHuH2GSWwZh7Q2UNQdF0tCpc4938KwLBhOF8dO4s9/oRuhGWSRok45td910LxYJkI3KopUyis26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "254266c2-3bcf-4419-a4d7-4e4020bb8c30", "record_id": "flaws_cloudtrail:0000312:254266c2-3bcf-4419-a4d7-4e4020bb8c30", "row_index": 312, "timestamp": "2017-05-27T03:08:29Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI895GKMSM13JW2J1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "254266c2-3bcf-4419-a4d7-4e4020bb8c30", "eventTime": "2017-05-27T03:08:29Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI895GKMSM13JW2J1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70f54fad-21e7-406c-bc3d-f42a746ff033", "record_id": "flaws_cloudtrail:0000313:70f54fad-21e7-406c-bc3d-f42a746ff033", "row_index": 313, "timestamp": "2017-05-27T03:08:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70f54fad-21e7-406c-bc3d-f42a746ff033", "eventTime": "2017-05-27T03:08:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1HCYFVZI9V4E2PVW", "expiration": "May 27, 2017 4:08:29 AM", "sessionToken": "FQoDYXdzECQaDGLz/UyMg/xBIYMgZCLMATcYgTME7yI+U8qdhdMm2CQSKMnLao1QXFqTCT7lFm5oEcNWsjT/jk/arATy3FsY/vLqVTfL9iIFIszX8V+Ybo7Jy6xDkqnJbpbQKOPzHNTlkt+JzLBkU23NKY1KayakDINATGNncvSMehEeObQC55/QZHbdm8/QiLWkTIRaDgeQBfdVr4Dv+3eGGcPS5Wq7nT3um8YtU/evuzmfd5tPMKEG3Bz5V/u3n5rLLPKXOFLsyOQBzBcLkb57roRt9pm4UF9zV0abOPBYktW8liit26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab073632a-4880-4d3e-a5f8-460299cac325", "record_id": "flaws_cloudtrail:0000314:ab073632a-4880-4d3e-a5f8-460299cac325", "row_index": 314, "timestamp": "2017-05-27T03:08:30Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1HCYFVZI9V4E2PVW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab073632a-4880-4d3e-a5f8-460299cac325", "eventTime": "2017-05-27T03:08:30Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1HCYFVZI9V4E2PVW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "182650-5ffa-499a-99b4-465370e", "record_id": "flaws_cloudtrail:0000315:182650-5ffa-499a-99b4-465370e", "row_index": 315, "timestamp": "2017-05-27T03:08:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1446, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "182650-5ffa-499a-99b4-465370e", "eventTime": "2017-05-27T03:08:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4EBNENBWEQFZM4XK", "expiration": "May 27, 2017 4:08:30 AM", "sessionToken": "FQoDYXdzECQaDJSohtRKIxNb5TyU3yLMAQYavpd6jIfgv61hguHJ2L+rBYDc3FmpmzvDz2Q1/rxWc+HwPOHU9EFkfar16OBZWBQBLdA8UBw+f1O2PGA4GkOCNGTtOgchvQHV2L9/D8LwLqe9cZnLR8k8LZLZ1ND3ju+AkITp6QAfAKqOpf5fx3isdWR1k7Dshb/vatewOSycQCseV6XAYz2V/Wih8GcYNMbKYre2eYUxqWzSidgtQDb0msQg8djnYs5WAAVuuiRsTgQbChM/Upa6txD+vOL/iwEzswKs6r6MOxw/JSiu26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f252699-1d8c-46d0-989d-586381faa650", "record_id": "flaws_cloudtrail:0000316:42f252699-1d8c-46d0-989d-586381faa650", "row_index": 316, "timestamp": "2017-05-27T03:08:31Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4EBNENBWEQFZM4XK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f252699-1d8c-46d0-989d-586381faa650", "eventTime": "2017-05-27T03:08:31Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4EBNENBWEQFZM4XK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a14f527-4f1e-40cf-91ca-f103a7ee041f", "record_id": "flaws_cloudtrail:0000317:9a14f527-4f1e-40cf-91ca-f103a7ee041f", "row_index": 317, "timestamp": "2017-05-27T03:08:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a14f527-4f1e-40cf-91ca-f103a7ee041f", "eventTime": "2017-05-27T03:08:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9LM1WE0R3RULHQOR", "expiration": "May 27, 2017 4:08:32 AM", "sessionToken": "FQoDYXdzECQaDCFrrNo+4NWGO9ZQYCLMAS5crtUBuMuIGAh6kNBOJQX5TwdYojjl7X9JjHiIoxlX+Knjzz/N+ibrIFEkJceUbTNJhVXCge/FFrryTha5fCY2qHCs2sJEHLuhVtf5KpFL+UTUsyONWOic9+APx2N5s/tJxzaknln316351RiIgiKhDk8/Vd4eVwavVNDpwCGB4ub08/ZyySsgoZulgc7P2j3jr/U2ORkD5QlYa8cFDDfZlGSI4MPjA3xyzRBkPOkG+opT6ThPEbfmOr214KjhP1PcA9me3f+GOksdU/iiw26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40b0580d-688e-4a11-a4df-6be108c03a2f", "record_id": "flaws_cloudtrail:0000318:40b0580d-688e-4a11-a4df-6be108c03a2f", "row_index": 318, "timestamp": "2017-05-27T03:08:33Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40b0580d-688e-4a11-a4df-6be108c03a2f", "eventTime": "2017-05-27T03:08:33Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58db205e-29f9-4fc8-98fd-06a5d98230b8", "record_id": "flaws_cloudtrail:0000319:58db205e-29f9-4fc8-98fd-06a5d98230b8", "row_index": 319, "timestamp": "2017-05-27T03:08:34Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58db205e-29f9-4fc8-98fd-06a5d98230b8", "eventTime": "2017-05-27T03:08:34Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccb6d9cf-c923-4881-b1bb-7b43ad49bb30", "record_id": "flaws_cloudtrail:0000320:ccb6d9cf-c923-4881-b1bb-7b43ad49bb30", "row_index": 320, "timestamp": "2017-05-27T03:08:35Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccb6d9cf-c923-4881-b1bb-7b43ad49bb30", "eventTime": "2017-05-27T03:08:35Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "706cebf8-5713-405b-a604-71fcc1113a57", "record_id": "flaws_cloudtrail:0000321:706cebf8-5713-405b-a604-71fcc1113a57", "row_index": 321, "timestamp": "2017-05-27T03:08:37Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "706cebf8-5713-405b-a604-71fcc1113a57", "eventTime": "2017-05-27T03:08:37Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fae92d23-a7ab-4eec-a117-47e263900d18", "record_id": "flaws_cloudtrail:0000322:fae92d23-a7ab-4eec-a117-47e263900d18", "row_index": 322, "timestamp": "2017-05-27T03:08:38Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fae92d23-a7ab-4eec-a117-47e263900d18", "eventTime": "2017-05-27T03:08:38Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2badb873-ecab-4b53-a8aa-00dae729e2a4", "record_id": "flaws_cloudtrail:0000323:2badb873-ecab-4b53-a8aa-00dae729e2a4", "row_index": 323, "timestamp": "2017-05-27T03:08:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2badb873-ecab-4b53-a8aa-00dae729e2a4", "eventTime": "2017-05-27T03:08:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8efe4adf-f932-4294-a860-9afd8c0f682e", "record_id": "flaws_cloudtrail:0000324:8efe4adf-f932-4294-a860-9afd8c0f682e", "row_index": 324, "timestamp": "2017-05-27T03:08:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8efe4adf-f932-4294-a860-9afd8c0f682e", "eventTime": "2017-05-27T03:08:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c33bcab1-591d-408b-bec2-1dac5362ce12", "record_id": "flaws_cloudtrail:0000325:c33bcab1-591d-408b-bec2-1dac5362ce12", "row_index": 325, "timestamp": "2017-05-27T03:08:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c33bcab1-591d-408b-bec2-1dac5362ce12", "eventTime": "2017-05-27T03:08:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb89028-c127-4135-af17-78b5e296e7f7", "record_id": "flaws_cloudtrail:0000326:bb89028-c127-4135-af17-78b5e296e7f7", "row_index": 326, "timestamp": "2017-05-27T03:08:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb89028-c127-4135-af17-78b5e296e7f7", "eventTime": "2017-05-27T03:08:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69127-8a95-432a-8755-59d0c724f21c", "record_id": "flaws_cloudtrail:0000327:69127-8a95-432a-8755-59d0c724f21c", "row_index": 327, "timestamp": "2017-05-27T03:08:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69127-8a95-432a-8755-59d0c724f21c", "eventTime": "2017-05-27T03:08:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f583534d-151d-41a7-92a3-cb15f8b9f383", "record_id": "flaws_cloudtrail:0000328:4f583534d-151d-41a7-92a3-cb15f8b9f383", "row_index": 328, "timestamp": "2017-05-27T03:08:43Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f583534d-151d-41a7-92a3-cb15f8b9f383", "eventTime": "2017-05-27T03:08:43Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af8d545-f3d3-4b5d-aabe-fa96c0d0ed52", "record_id": "flaws_cloudtrail:0000329:5af8d545-f3d3-4b5d-aabe-fa96c0d0ed52", "row_index": 329, "timestamp": "2017-05-27T03:08:43Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af8d545-f3d3-4b5d-aabe-fa96c0d0ed52", "eventTime": "2017-05-27T03:08:43Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c5452af-a053-47fe-bdca-6410c287f633", "record_id": "flaws_cloudtrail:0000330:1c5452af-a053-47fe-bdca-6410c287f633", "row_index": 330, "timestamp": "2017-05-27T03:08:44Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c5452af-a053-47fe-bdca-6410c287f633", "eventTime": "2017-05-27T03:08:44Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d854c97c-18c9-4ba8-871f-34fde0672049", "record_id": "flaws_cloudtrail:0000331:d854c97c-18c9-4ba8-871f-34fde0672049", "row_index": 331, "timestamp": "2017-05-27T03:08:44Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9LM1WE0R3RULHQOR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d854c97c-18c9-4ba8-871f-34fde0672049", "eventTime": "2017-05-27T03:08:44Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9LM1WE0R3RULHQOR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1704a7-c972-47da-aeb8-1226f15d8fd5", "record_id": "flaws_cloudtrail:0000332:1a1704a7-c972-47da-aeb8-1226f15d8fd5", "row_index": 332, "timestamp": "2017-05-27T03:08:45Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1704a7-c972-47da-aeb8-1226f15d8fd5", "eventTime": "2017-05-27T03:08:45Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec90b5b-3f33-4f59-8403-0b04dbd7f3c7", "record_id": "flaws_cloudtrail:0000333:eec90b5b-3f33-4f59-8403-0b04dbd7f3c7", "row_index": 333, "timestamp": "2017-05-27T03:08:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec90b5b-3f33-4f59-8403-0b04dbd7f3c7", "eventTime": "2017-05-27T03:08:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFPIR7AN77NDUY36C", "expiration": "May 27, 2017 4:08:45 AM", "sessionToken": "FQoDYXdzECQaDJEX0eJWRSE1xioVeiLMAYt/xXv2BOE0SYpH5nlY9YzCRrkXBSjJTP4o54Z+1B53Xf++ZY2Mw5Ru+nKRQfXJs/C3cXl4fQtr6U7tLZvLnJjv0Uh257GV+Mz2TJ4x1+XR+Mp7CeqVedhmEJyrlIDFR0ssKhdLc5Ju6g4LHTwJDBtiS/VeFJkDpyBZiakkZxaLXLzERGJYRjPOBsdHmM9TAe98ItxvnETIIFuuX8pxbu/RyT5pe0yAp/QEz7S4IaKRdu77zE8iQwZby1Ms2DHAi1OZQcuKyNd3UWt73ii926PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1ae954e-f9e1-4554-9305-328fea7a6f7b", "record_id": "flaws_cloudtrail:0000334:e1ae954e-f9e1-4554-9305-328fea7a6f7b", "row_index": 334, "timestamp": "2017-05-27T03:08:47Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1ae954e-f9e1-4554-9305-328fea7a6f7b", "eventTime": "2017-05-27T03:08:47Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2796d372-a163-4ae0-8471-5c46ff8d0141", "record_id": "flaws_cloudtrail:0000335:2796d372-a163-4ae0-8471-5c46ff8d0141", "row_index": 335, "timestamp": "2017-05-27T03:08:48Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2796d372-a163-4ae0-8471-5c46ff8d0141", "eventTime": "2017-05-27T03:08:48Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab328f12-7ea5-480f-9ff9-1c4cb6efcac5", "record_id": "flaws_cloudtrail:0000336:ab328f12-7ea5-480f-9ff9-1c4cb6efcac5", "row_index": 336, "timestamp": "2017-05-27T03:08:49Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab328f12-7ea5-480f-9ff9-1c4cb6efcac5", "eventTime": "2017-05-27T03:08:49Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf35396-cf20-4629-b9bc-3f19d6251212", "record_id": "flaws_cloudtrail:0000337:bf35396-cf20-4629-b9bc-3f19d6251212", "row_index": 337, "timestamp": "2017-05-27T03:08:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf35396-cf20-4629-b9bc-3f19d6251212", "eventTime": "2017-05-27T03:08:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec22b859-53bd-42f1-880d-8feff213a6dd", "record_id": "flaws_cloudtrail:0000338:ec22b859-53bd-42f1-880d-8feff213a6dd", "row_index": 338, "timestamp": "2017-05-27T03:08:51Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec22b859-53bd-42f1-880d-8feff213a6dd", "eventTime": "2017-05-27T03:08:51Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1687d031-8e99-4934-9bf2-544906e221", "record_id": "flaws_cloudtrail:0000339:1687d031-8e99-4934-9bf2-544906e221", "row_index": 339, "timestamp": "2017-05-27T03:08:52Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1687d031-8e99-4934-9bf2-544906e221", "eventTime": "2017-05-27T03:08:52Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d3c7f5f-0fce-43a4-aa48-8a408cd957e5", "record_id": "flaws_cloudtrail:0000340:0d3c7f5f-0fce-43a4-aa48-8a408cd957e5", "row_index": 340, "timestamp": "2017-05-27T03:08:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d3c7f5f-0fce-43a4-aa48-8a408cd957e5", "eventTime": "2017-05-27T03:08:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92fa0892-85b1-490f-b2a4-85b622a46f58", "record_id": "flaws_cloudtrail:0000341:92fa0892-85b1-490f-b2a4-85b622a46f58", "row_index": 341, "timestamp": "2017-05-27T03:08:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92fa0892-85b1-490f-b2a4-85b622a46f58", "eventTime": "2017-05-27T03:08:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4eabd7f-b427-48ce-bf58-1f592bedf68e", "record_id": "flaws_cloudtrail:0000342:a4eabd7f-b427-48ce-bf58-1f592bedf68e", "row_index": 342, "timestamp": "2017-05-27T03:08:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4eabd7f-b427-48ce-bf58-1f592bedf68e", "eventTime": "2017-05-27T03:08:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76bbbf44-0086-4ed1-98d3-122619aec3136", "record_id": "flaws_cloudtrail:0000343:76bbbf44-0086-4ed1-98d3-122619aec3136", "row_index": 343, "timestamp": "2017-05-27T03:08:55Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76bbbf44-0086-4ed1-98d3-122619aec3136", "eventTime": "2017-05-27T03:08:55Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89f1370c-6fb6-46d8-b600-cc75efc7f3ca", "record_id": "flaws_cloudtrail:0000344:89f1370c-6fb6-46d8-b600-cc75efc7f3ca", "row_index": 344, "timestamp": "2017-05-27T03:08:55Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89f1370c-6fb6-46d8-b600-cc75efc7f3ca", "eventTime": "2017-05-27T03:08:55Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d533e96d-df08-4752-8e21-07b6153f4ef0", "record_id": "flaws_cloudtrail:0000345:d533e96d-df08-4752-8e21-07b6153f4ef0", "row_index": 345, "timestamp": "2017-05-27T03:08:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d533e96d-df08-4752-8e21-07b6153f4ef0", "eventTime": "2017-05-27T03:08:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMTDGEO1KPQC7O3I4", "expiration": "May 27, 2017 4:08:56 AM", "sessionToken": "FQoDYXdzECQaDOyZnCVV+9cU1e/FxyLMAetMeiVgw4jaZVX47P8dHt92oQxFl+VKgFOdCnq/KaWkGTrVGhtYtmZt85Yq85CeeuaBlJ9WkQwyFV7ADwI1a5n8DUHjLsa+xAlVBuyFnyzELl/HQxwQVSZkXhZZsxrluRBWqefjsGwLtbBdd0WyafNEPSyKKCHT9vxlN1uQx+T77YswqOQVCEN7udKhOoVmuhLjlZ/CJqLmBHISaosyA7eesnxavic/wcDzHAAOzWPQJUVZe5qLca8eB7DoTYzSpnZLLR6xLUAlwCXOWyjI26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d41b4df-4bd3-45bb-934e-408c14cc1c9a", "record_id": "flaws_cloudtrail:0000346:1d41b4df-4bd3-45bb-934e-408c14cc1c9a", "row_index": 346, "timestamp": "2017-05-27T03:08:56Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d41b4df-4bd3-45bb-934e-408c14cc1c9a", "eventTime": "2017-05-27T03:08:56Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c197bdb3-cacb-4646-ac69-83527e1759", "record_id": "flaws_cloudtrail:0000347:c197bdb3-cacb-4646-ac69-83527e1759", "row_index": 347, "timestamp": "2017-05-27T03:08:56Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFPIR7AN77NDUY36C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c197bdb3-cacb-4646-ac69-83527e1759", "eventTime": "2017-05-27T03:08:56Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFPIR7AN77NDUY36C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9eb0cf0-712c-49d4-8047-75f6c5911a91", "record_id": "flaws_cloudtrail:0000348:a9eb0cf0-712c-49d4-8047-75f6c5911a91", "row_index": 348, "timestamp": "2017-05-27T03:08:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9eb0cf0-712c-49d4-8047-75f6c5911a91", "eventTime": "2017-05-27T03:08:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWSUYEMOCMMZCVNRC", "expiration": "May 27, 2017 4:08:57 AM", "sessionToken": "FQoDYXdzECQaDGmBTU8dBzCYrmRhdiLMAdqyrxyNmQNtKXtxENTj3P2HbzrtdwwBMz4PUvjqij4yHBRTMD1wWFKdPAwr67/asc2/tM45gr3nvn4dgsx9+WfTGVxowV/fH1fvqye/BlILaRkRYNfQvb78W8NCV16ZhhPh+xggk6OGNj7T8WhYeQ5Vn3iCs/duJsrb5XSkNU0VLGlQBatKrR5qmV68yEaDIk8cK1mqcwKmZKGogQKeG/fxV1nMsAKVTkjJJmUltUMLAfpICpWX7lfvVg1AHzZaDFVM0OOCoIxQj6cVSijJ26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60168b2-bc37-42ed-990c-1ad1cbb297d0", "record_id": "flaws_cloudtrail:0000349:60168b2-bc37-42ed-990c-1ad1cbb297d0", "row_index": 349, "timestamp": "2017-05-27T03:08:57Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMTDGEO1KPQC7O3I4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60168b2-bc37-42ed-990c-1ad1cbb297d0", "eventTime": "2017-05-27T03:08:57Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMTDGEO1KPQC7O3I4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb342831-c670-4e2a-94a2-b67bd9ad3562", "record_id": "flaws_cloudtrail:0000350:bb342831-c670-4e2a-94a2-b67bd9ad3562", "row_index": 350, "timestamp": "2017-05-27T03:08:58Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAWSUYEMOCMMZCVNRC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb342831-c670-4e2a-94a2-b67bd9ad3562", "eventTime": "2017-05-27T03:08:58Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAWSUYEMOCMMZCVNRC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fef55a3e-91f2-4ea5-b598-0d8adde3697f", "record_id": "flaws_cloudtrail:0000351:fef55a3e-91f2-4ea5-b598-0d8adde3697f", "row_index": 351, "timestamp": "2017-05-27T03:08:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fef55a3e-91f2-4ea5-b598-0d8adde3697f", "eventTime": "2017-05-27T03:08:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABAZFLF4I8790JAS4", "expiration": "May 27, 2017 4:08:58 AM", "sessionToken": "FQoDYXdzECQaDI3SFGrU9wtkSjH6USLMAcZf7Q+QK+lhU5sUvPkV7n5hdvhGPXxhV/sh2N42GcJafBMvfzh8WrArgA4VCfipAC8NqdSIKivoLUvQ+nPCAmd5bgsHerpxU7YVkLNgW24idFaxgqLr/Wr0/YGTy4Q3qqiWkvBWRrzs5O1rT1ccsHxYhj3ZUqDb7OjCXKVbzK8WOonh8Fe9o3tgmmjFl9a8Uq1dgI2swXu670DsrQ53BwHsEQS/y5OFxvmO3A7L2DnpSI/ZzrXqKEoEnfzPYZVIYqrFxphQcFHwcmIksSjK26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf6f9dae-cc30-4216-9b12-70bff20442d", "record_id": "flaws_cloudtrail:0000352:bf6f9dae-cc30-4216-9b12-70bff20442d", "row_index": 352, "timestamp": "2017-05-27T03:08:59Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABAZFLF4I8790JAS4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf6f9dae-cc30-4216-9b12-70bff20442d", "eventTime": "2017-05-27T03:08:59Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABAZFLF4I8790JAS4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b7e0d9-580e-4324-bc29-56711eec8489", "record_id": "flaws_cloudtrail:0000353:05b7e0d9-580e-4324-bc29-56711eec8489", "row_index": 353, "timestamp": "2017-05-27T03:08:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b7e0d9-580e-4324-bc29-56711eec8489", "eventTime": "2017-05-27T03:08:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAULVO9XYX5H3UZXJT", "expiration": "May 27, 2017 4:08:59 AM", "sessionToken": "FQoDYXdzECQaDA1NnNXOcPdvVAedGyLMAXCIW6CpsQFLfID2nc8rCPd+F6tXw2jJ0SxmNanYVpeQF7wTI00sFLQ6hdDrIcZInDiQyzVnRih2LvxA9IFw592ZJ8cDstJvMUkNmVGHjLjL1X8C584X+QFbSLuvSYPVgz8D8sTlC+JwDjQcksvCHHNga7lDMp3I/1Kf2pEX6Ba1XTc3M2tttyCk/WD4cWM1qFQ9kcH4YBVLsYxTK5JSI19oATUhpYC6znaZ+FyMab1GOijiXDwHmLB9BU57eazXriN9uCZd82YLK1RUAijL26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4f32d28-2351-4687-aa71-1b33c7a99da4", "record_id": "flaws_cloudtrail:0000354:e4f32d28-2351-4687-aa71-1b33c7a99da4", "row_index": 354, "timestamp": "2017-05-27T03:09:01Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAULVO9XYX5H3UZXJT", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4f32d28-2351-4687-aa71-1b33c7a99da4", "eventTime": "2017-05-27T03:09:01Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAULVO9XYX5H3UZXJT", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:08:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab6f155-c05d-4d49-90b7-ba6a6566fcb7", "record_id": "flaws_cloudtrail:0000355:aab6f155-c05d-4d49-90b7-ba6a6566fcb7", "row_index": 355, "timestamp": "2017-05-27T03:09:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab6f155-c05d-4d49-90b7-ba6a6566fcb7", "eventTime": "2017-05-27T03:09:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASG5ZY14N5B56OA1H", "expiration": "May 27, 2017 4:09:01 AM", "sessionToken": "FQoDYXdzECQaDIz5kYvOYS/MIxKKviLMAVzcRE3OsBaCGvsfclnzG7aOlhelSTcdh80tv/TR2h5vJoSeDb9FyeXVeRIqr3cP8JJUA8/n45TQPI1Q8ySgog24YZI4iVAmkYUMBCdywkh7O6ryob+7YlLdAuzDHFnyK4EvDl2Dd5zfBJJGIr3oFLM9dLiV/sztYHsovNn9w8UTmlpmIbM1g8//7/h0eIWAwHqLns2BG5tX4y4vwaTU0k7yiwuwiqLP16ei6FQW1pF6Tpi6+GlnNHXXjinXBLZpUiQFOq3BmCiJ6nnYvijN26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617ceef0-3896-404c-bcf1-6224b67448", "record_id": "flaws_cloudtrail:0000356:617ceef0-3896-404c-bcf1-6224b67448", "row_index": 356, "timestamp": "2017-05-27T03:09:02Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASG5ZY14N5B56OA1H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617ceef0-3896-404c-bcf1-6224b67448", "eventTime": "2017-05-27T03:09:02Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASG5ZY14N5B56OA1H", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89dc578e-8b26-4c2f-b996-d784788c3078", "record_id": "flaws_cloudtrail:0000357:89dc578e-8b26-4c2f-b996-d784788c3078", "row_index": 357, "timestamp": "2017-05-27T03:09:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89dc578e-8b26-4c2f-b996-d784788c3078", "eventTime": "2017-05-27T03:09:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1IUYWLEB9FXEATEP", "expiration": "May 27, 2017 4:09:02 AM", "sessionToken": "FQoDYXdzECQaDOo4GYypo9a9TXG9DSLMAVgvl3U7ebeBYAZueH0An+VhczzPyClBVXuOsOPlt9n4omNxyhkKkJIrFjuIsTwClYoX9MnYR2ANIFNSizCcNPjLhb+Zd2iM5tUBHAu1JbrJ01zR623Sj78hMCNgp/96WX97AOcMoYx3x4v1zF5Tipth/LzFgJHQeGH3jVwpK/pOQpOdCkfQY0j8fq3e/GIUsaHU8zwOqj5LHGBbcq2xL2kjKPcjHxwyICrEdh0Amoy18NfCvcYkEAtI1v5cuXYQTqpRrTuj77hpFK0wQCjO26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "237a9564-04c1-41cc-a389-7bd15898e", "record_id": "flaws_cloudtrail:0000358:237a9564-04c1-41cc-a389-7bd15898e", "row_index": 358, "timestamp": "2017-05-27T03:09:03Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1IUYWLEB9FXEATEP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "237a9564-04c1-41cc-a389-7bd15898e", "eventTime": "2017-05-27T03:09:03Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1IUYWLEB9FXEATEP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b22c54e0-f178-4cec-8453-121058c4fd1", "record_id": "flaws_cloudtrail:0000359:b22c54e0-f178-4cec-8453-121058c4fd1", "row_index": 359, "timestamp": "2017-05-27T03:09:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b22c54e0-f178-4cec-8453-121058c4fd1", "eventTime": "2017-05-27T03:09:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4CD6JL0YYU3BOSOD", "expiration": "May 27, 2017 4:09:04 AM", "sessionToken": "FQoDYXdzECQaDNuAuRRoLMaaLELPqSLMAWNKMLK95qWjXN1yKtuu9Kk7oKbEG2xmpokRPBGg/sjSA1D94/OWGULWHLjKXZHVWVGQ+UtPClN4LjCAZtBGSZQ+nYVAc4OV8LsNJLDns7eio/FO+3GReHzJR4AEyTamBJWj/tZrOmX64pBihXPp5KZFxFv+yY/6er2C3vf4IfNq5S6W0xA6gVAqIOOV3DeJTOiBKldW3+/OXRsiNDj0Gj+zvixC2U7Hm+vfadkSSqAVKHLc9k++nflk1WHkOzNcqzDWhotHFHL0eQOkEyjQ26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "750821-1192-45b9-9d02-1f301ed4cefc", "record_id": "flaws_cloudtrail:0000360:750821-1192-45b9-9d02-1f301ed4cefc", "row_index": 360, "timestamp": "2017-05-27T03:09:04Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4CD6JL0YYU3BOSOD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "750821-1192-45b9-9d02-1f301ed4cefc", "eventTime": "2017-05-27T03:09:04Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4CD6JL0YYU3BOSOD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bd107797-250d-4b7e-9d61-246f7f1c043b", "record_id": "flaws_cloudtrail:0000361:4bd107797-250d-4b7e-9d61-246f7f1c043b", "row_index": 361, "timestamp": "2017-05-27T03:09:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bd107797-250d-4b7e-9d61-246f7f1c043b", "eventTime": "2017-05-27T03:09:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKNIGFKMY9PSVBQU4", "expiration": "May 27, 2017 4:09:05 AM", "sessionToken": "FQoDYXdzECQaDNM8zAhrRS4LGLgPFSLMAaAf4O5wDYh9Swc7q5XeCw+JLUtHasKOY4nZxzav1JVkhatOGEM091VLpGsoFr53pOM+cXiSBPDXnyAVmiF0U/Nuy+GODbaahAL0cxKq2ydzIrvbQ39DLYQWccwrN+wCOJYgagcaFN2YFLDf452EDCwCw2+mpYYY6nTriaISG+34p4STyts1+bFjnFZK/BYxpmiXiYC+1aRgAKX5GHDWWOzjtuMlF3IH8pEj3ZydBtT8zpSH2nuqYo08zKvbIa9BIInChkart6tM8ezXICjR26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "821013d2-1b6f-4e37-808f-4db05b6b7f27", "record_id": "flaws_cloudtrail:0000362:821013d2-1b6f-4e37-808f-4db05b6b7f27", "row_index": 362, "timestamp": "2017-05-27T03:09:06Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKNIGFKMY9PSVBQU4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "821013d2-1b6f-4e37-808f-4db05b6b7f27", "eventTime": "2017-05-27T03:09:06Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKNIGFKMY9PSVBQU4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496bd02b-200c-4fdc-b1a1-7f9c1b929400", "record_id": "flaws_cloudtrail:0000363:496bd02b-200c-4fdc-b1a1-7f9c1b929400", "row_index": 363, "timestamp": "2017-05-27T03:09:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496bd02b-200c-4fdc-b1a1-7f9c1b929400", "eventTime": "2017-05-27T03:09:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2Z8R719NRIH9PV6L", "expiration": "May 27, 2017 4:09:06 AM", "sessionToken": "FQoDYXdzECQaDOyTDKcL4GgOSpgK3yLMAfJXJ01kcDPOPAnN7f/AftakB6aj9Z+IQ4V/7Z5j9cxoJH4PziFnev+FHgoXfAgIuGltK353CbhoSHQgB8Y6JysbOk+rlvQAdNziwshnK1R6cPRtBX1QBbn2xJyrie7c9EK8RNZ/Zh4VoQcEOhDh6pQBDgmJlsNIBXqvxHV+fOutkftURKLNtElKiIjcZTDEBE1dRzx8y69ge5RInxlEkJHTT+QyrF1IS4Y3zlPzjjcMfBlAu3jK6IVMSKb7gzkCg6KJi+woXxxzBYeRLyjS26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165c64bc-f4c6-4d27-a9d6-43567e095b", "record_id": "flaws_cloudtrail:0000364:165c64bc-f4c6-4d27-a9d6-43567e095b", "row_index": 364, "timestamp": "2017-05-27T03:09:07Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2Z8R719NRIH9PV6L", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165c64bc-f4c6-4d27-a9d6-43567e095b", "eventTime": "2017-05-27T03:09:07Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2Z8R719NRIH9PV6L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7c0cd30-e281-4480-9f44-f79bf388f1a9", "record_id": "flaws_cloudtrail:0000365:b7c0cd30-e281-4480-9f44-f79bf388f1a9", "row_index": 365, "timestamp": "2017-05-27T03:09:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7c0cd30-e281-4480-9f44-f79bf388f1a9", "eventTime": "2017-05-27T03:09:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVS8U0XQLL34T7VCI", "expiration": "May 27, 2017 4:09:07 AM", "sessionToken": "FQoDYXdzECQaDNKcz/blFw9cMqYjCyLMAcgMJPGUvC3uas/BUnvf73byKAoB/aEQ6gxnPHLy/jo1Ey6Clq+zIpACuH6hvfghCdwB43AL3qmNCH6Z7Ai5kW1dqX58JXXBoPZYKmDJwkjrcuCTJCWufTc9WGEkKSH0hDucV0eQUaWhOmZb26M7UbhV0eTMk0XTlBlgtmVca0+hqzIKUCPlJ4Q2mX9T3IKENJMOVmRqfNQNYNJ8Zl1rhGkb2MTAL7xReVCmRDLjFHbGZ6oXKf8QPgGWgZ4Q0m+0le22XshlXjyOfJbPPCjT26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac57929-7a70-46c0-8475-2ac0e360b9f3", "record_id": "flaws_cloudtrail:0000366:bac57929-7a70-46c0-8475-2ac0e360b9f3", "row_index": 366, "timestamp": "2017-05-27T03:09:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac57929-7a70-46c0-8475-2ac0e360b9f3", "eventTime": "2017-05-27T03:09:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHS19ME4HEUJERC3F", "expiration": "May 27, 2017 4:09:08 AM", "sessionToken": "FQoDYXdzECQaDJCYfZAUeAIMCsvIbSLMAT1II5G7GuMf4VWk2fLL2E1kGKqLi2aF7y7AOsoqyw4fofDpgY7OlTafGrCqWGK3L2hsqYwoV3dvMv+21S0Qmkc3M2pM3MLDEtlKrYUbngYblPf4Oy2OT5L7yeG26HhYR7ri1evTPGInfPQaMeSYBQLU4sYHmfPRMjPf1ZIyRzl0ssXdK6haQ6cZlNuiDY9fl/jiabXvFqT5a3PYq3xKfZhYimKeZKfwQxss980RfKg6xw6fcb4P+ZFHN3nuvFw+0PBuUWKF0xi/VCCfKCjU26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957b49d7-5d01-4380-8373-20590f0b1780", "record_id": "flaws_cloudtrail:0000367:957b49d7-5d01-4380-8373-20590f0b1780", "row_index": 367, "timestamp": "2017-05-27T03:09:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957b49d7-5d01-4380-8373-20590f0b1780", "eventTime": "2017-05-27T03:09:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7RF8K28IOR1LPAF6", "expiration": "May 27, 2017 4:09:09 AM", "sessionToken": "FQoDYXdzECQaDJGOdY/nu65ZP2piTyLMAV1KL/gsAxRbV6ZZNBsOUJ3sP00YZjH3IOwPcmoucosgrS4rwZJilDnOJfjShEKkXRqHsgX9Ie+B3VhMOPO+pabH8d687z7vKGraxXJK3Xsfg1IpDTLR4i/zspFW5GlRbtyIxfABB4qbOjSQt8WKBcVxJOvDdrbNGxCutDjntFSTpoKXfYtKDxT5BMw2JEeGmOu6BBidEUIbprVP6aNxp/vmPxcxwXH4h6uPYRV7VIW3AVt4QgVF9nD00IBW9hnWmh2+8S0xnGXccJ16eSjV26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcbcc3f2-f498-4e46-b76d-af34f6ca52c2", "record_id": "flaws_cloudtrail:0000368:bcbcc3f2-f498-4e46-b76d-af34f6ca52c2", "row_index": 368, "timestamp": "2017-05-27T03:09:09Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHS19ME4HEUJERC3F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcbcc3f2-f498-4e46-b76d-af34f6ca52c2", "eventTime": "2017-05-27T03:09:09Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHS19ME4HEUJERC3F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62d807f5-0fba-4626-a7fa-b72e1da81c36", "record_id": "flaws_cloudtrail:0000369:62d807f5-0fba-4626-a7fa-b72e1da81c36", "row_index": 369, "timestamp": "2017-05-27T03:09:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62d807f5-0fba-4626-a7fa-b72e1da81c36", "eventTime": "2017-05-27T03:09:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ6PAFUA17LARR78N", "expiration": "May 27, 2017 4:09:10 AM", "sessionToken": "FQoDYXdzECQaDAPZTR7DVKVtuvnJgCLMASogKrQMLLLUxs2bf11eNFZ2XcQdmUFYq1cYQRYav0UhPk+YsVkdpMJFSWlGsUT3wiUqmA0YbC8CcV8oEZRtZ3UdTalG6kzcroFKFBxkEgQdQ3Dhaz5uUfZ133039C+JyW4EzuOgO4i5cGQlfr/83U5CF52UaYDltacKf4UcZ4hKXTZRkznysneWQMVfzIeAmfVxzP55rJoYfvuyMik4hFhxpAbGCvs0D2ZJnyi7jUKQcacJdvdMHXeRqFv8eN6L4e12gk49anZ/l8bSijW26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3245a39c-fb4e-43a5-a841-bb99e8cadd60", "record_id": "flaws_cloudtrail:0000370:3245a39c-fb4e-43a5-a841-bb99e8cadd60", "row_index": 370, "timestamp": "2017-05-27T03:09:11Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ6PAFUA17LARR78N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3245a39c-fb4e-43a5-a841-bb99e8cadd60", "eventTime": "2017-05-27T03:09:11Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ6PAFUA17LARR78N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e64f4a-2194-4d6e-85df-f03288b59e87", "record_id": "flaws_cloudtrail:0000371:73e64f4a-2194-4d6e-85df-f03288b59e87", "row_index": 371, "timestamp": "2017-05-27T03:09:12Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA94KN8BRX529K8IZZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e64f4a-2194-4d6e-85df-f03288b59e87", "eventTime": "2017-05-27T03:09:12Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA94KN8BRX529K8IZZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "441afa63-88cd-44bb-9e5d-115fc42fcee5", "record_id": "flaws_cloudtrail:0000372:441afa63-88cd-44bb-9e5d-115fc42fcee5", "row_index": 372, "timestamp": "2017-05-27T03:09:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "441afa63-88cd-44bb-9e5d-115fc42fcee5", "eventTime": "2017-05-27T03:09:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA94KN8BRX529K8IZZ", "expiration": "May 27, 2017 4:09:12 AM", "sessionToken": "FQoDYXdzECQaDBV6+J41onsVCY72BiLMAYLZtI4LGuao880PxZekWpokY0OWLOCgEvyTPk7fy4x0j3gyV0F/4ckaDGygncPSVL2sJ6/NQYRNd4L6MXQobgfed8v9jLynk2J6I5Is6/Qux6ANGfP9NhzKCdxT75TJa6sCjUlHdDtPZ5g9zWGRKTsJsNVKSR+OWBQEFzFXRJnSpZdHdB7h/L/HEGnB6M3Tw43TFvwoeplG6deGQBibn1driF+iE6h5Yh6ll2MHQ037ZmtycmMzEcBshMiAi39+glykCa/KHVZj9yQEGijY26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b61589-de64-4e37-a3d4-f6b3fc0d7036", "record_id": "flaws_cloudtrail:0000373:b61589-de64-4e37-a3d4-f6b3fc0d7036", "row_index": 373, "timestamp": "2017-05-27T03:09:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b61589-de64-4e37-a3d4-f6b3fc0d7036", "eventTime": "2017-05-27T03:09:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG5SLK33DU2VL5B1N", "expiration": "May 27, 2017 4:09:13 AM", "sessionToken": "FQoDYXdzECQaDMloaqN7LS7YcjcanCLMAX61YZjiVGgQ/71jfvoeZlzp6gYggNUmOs9joOHHMc68ui8A2ddtNZx6fkrPHNLjNNGFlNitIMpBIhrTbEYqMiGPr0Tk6dzJKctZm47CBTLzJFtbxIVG97a0vrKB25VXOFZFINiNjXLq1v5KTgLfi66HPptCEjKsUkLsG/5znO/0uG/tq2JoUlxiEl4hpA4+T/NkD3NlhAADzb424Vke52BPnoHiTLHUZimmryyrKyIiU0v3EdMnVR1pVg0+dq1t1XSyJ08j2INbfKRrZCjZ26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbfb148a-7167-4174-9541-fd1dfbcd24a4", "record_id": "flaws_cloudtrail:0000374:fbfb148a-7167-4174-9541-fd1dfbcd24a4", "row_index": 374, "timestamp": "2017-05-27T03:09:14Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG5SLK33DU2VL5B1N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbfb148a-7167-4174-9541-fd1dfbcd24a4", "eventTime": "2017-05-27T03:09:14Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG5SLK33DU2VL5B1N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1aab3b2-ffc7-4fa7-abe5-97301bdb9347", "record_id": "flaws_cloudtrail:0000375:f1aab3b2-ffc7-4fa7-abe5-97301bdb9347", "row_index": 375, "timestamp": "2017-05-27T03:09:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1aab3b2-ffc7-4fa7-abe5-97301bdb9347", "eventTime": "2017-05-27T03:09:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6MK1CK38MARUIZ25", "expiration": "May 27, 2017 4:09:14 AM", "sessionToken": "FQoDYXdzECQaDA3XjwcDazimdB5QTyLMAS4c/wEVlFwR46o6M1+txmxFW/wJ5WOBwL6GIOcun1KLRVtGBWbP+p9g0/pvjN4403/15xTVumhs050X6RKhjmyyftwGaj175cveeWfjxQVAp7LDwn3PdJmXgIWMjK+D5ary+L95vyqxKSHLAuZYl0+jTNQMDeQxzVTxwORLAY24BIEqE3Wrhstaw28MYa8/uvMJGGtjiT81Zmuu9zEyjK5RkpLx2ZskXi+lRL3fyVOhtqkKV8JGL04Ys1n1b2eJTxyeNwPMhIHBqmNU8Sja26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3190dfc6-46cf-48d0-b17a-55cff64274e6", "record_id": "flaws_cloudtrail:0000376:3190dfc6-46cf-48d0-b17a-55cff64274e6", "row_index": 376, "timestamp": "2017-05-27T03:09:15Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6MK1CK38MARUIZ25", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3190dfc6-46cf-48d0-b17a-55cff64274e6", "eventTime": "2017-05-27T03:09:15Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6MK1CK38MARUIZ25", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b4e6588-f0f1-4938-98da-fa626cbc31f8", "record_id": "flaws_cloudtrail:0000377:8b4e6588-f0f1-4938-98da-fa626cbc31f8", "row_index": 377, "timestamp": "2017-05-27T03:09:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b4e6588-f0f1-4938-98da-fa626cbc31f8", "eventTime": "2017-05-27T03:09:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA396VGD4O4KYYPM5N", "expiration": "May 27, 2017 4:09:15 AM", "sessionToken": "FQoDYXdzECQaDBUXZzhruEMGJHQP8yLMATIkkwz+m0mMJXTQMu33wFTm7hUkKGN87j8TUuxFhe+9vBe8phDwLJHqEuI/x6MKvgol67youovwBHX5fuSQ04C94grja2SKjJMWzJSfMx3LxSUm7mWqet2bwewviT49LkoLsk71b2hYKgCNxlXvYElCaGWMHOq6TbfiMULQPsSiNEmVXb3wxPy4ZoYt+z+ucPSTJFfQDQpiE1AyPlHDw+Is86hvQCYijoLgDXKVknsYzPsz3awm0LmeodzeRYzRt5bV6Ltd1HqPwPWWlSjb26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b25bd5d8-beba-463c-bfee-138ac5c2d354", "record_id": "flaws_cloudtrail:0000378:b25bd5d8-beba-463c-bfee-138ac5c2d354", "row_index": 378, "timestamp": "2017-05-27T03:09:16Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b25bd5d8-beba-463c-bfee-138ac5c2d354", "eventTime": "2017-05-27T03:09:16Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342b21d3-d920-486e-80a5-7a6550e12b3e", "record_id": "flaws_cloudtrail:0000379:342b21d3-d920-486e-80a5-7a6550e12b3e", "row_index": 379, "timestamp": "2017-05-27T03:09:17Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342b21d3-d920-486e-80a5-7a6550e12b3e", "eventTime": "2017-05-27T03:09:17Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c4fb5eb-2ee5-4fdc-8ccc-cc0d3f15b256", "record_id": "flaws_cloudtrail:0000380:7c4fb5eb-2ee5-4fdc-8ccc-cc0d3f15b256", "row_index": 380, "timestamp": "2017-05-27T03:09:19Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c4fb5eb-2ee5-4fdc-8ccc-cc0d3f15b256", "eventTime": "2017-05-27T03:09:19Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb20537e-1b04-40d8-a4f0-139ba6c9c4cb", "record_id": "flaws_cloudtrail:0000381:eb20537e-1b04-40d8-a4f0-139ba6c9c4cb", "row_index": 381, "timestamp": "2017-05-27T03:09:20Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb20537e-1b04-40d8-a4f0-139ba6c9c4cb", "eventTime": "2017-05-27T03:09:20Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a6d7b3-d559-4e9f-a017-b2f7be99a862", "record_id": "flaws_cloudtrail:0000382:90a6d7b3-d559-4e9f-a017-b2f7be99a862", "row_index": 382, "timestamp": "2017-05-27T03:09:21Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a6d7b3-d559-4e9f-a017-b2f7be99a862", "eventTime": "2017-05-27T03:09:21Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ffb1c4-5b2b-4f27-84fe-a319f09f86fb", "record_id": "flaws_cloudtrail:0000383:f0ffb1c4-5b2b-4f27-84fe-a319f09f86fb", "row_index": 383, "timestamp": "2017-05-27T03:09:22Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ffb1c4-5b2b-4f27-84fe-a319f09f86fb", "eventTime": "2017-05-27T03:09:22Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9730b7f-577e-4f9c-8feb-8875572c8c64", "record_id": "flaws_cloudtrail:0000384:f9730b7f-577e-4f9c-8feb-8875572c8c64", "row_index": 384, "timestamp": "2017-05-27T03:09:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9730b7f-577e-4f9c-8feb-8875572c8c64", "eventTime": "2017-05-27T03:09:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa331976-388c-4acc-9206-89fdddbbe5b6", "record_id": "flaws_cloudtrail:0000385:fa331976-388c-4acc-9206-89fdddbbe5b6", "row_index": 385, "timestamp": "2017-05-27T03:09:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa331976-388c-4acc-9206-89fdddbbe5b6", "eventTime": "2017-05-27T03:09:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "256156-adc5-4eff-adac-71d5c59a8eb4", "record_id": "flaws_cloudtrail:0000386:256156-adc5-4eff-adac-71d5c59a8eb4", "row_index": 386, "timestamp": "2017-05-27T03:09:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "256156-adc5-4eff-adac-71d5c59a8eb4", "eventTime": "2017-05-27T03:09:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e92166-24f5-4950-a51b-3a4cb92deaa9", "record_id": "flaws_cloudtrail:0000387:e92166-24f5-4950-a51b-3a4cb92deaa9", "row_index": 387, "timestamp": "2017-05-27T03:09:25Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e92166-24f5-4950-a51b-3a4cb92deaa9", "eventTime": "2017-05-27T03:09:25Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a8bf8e5-d4a2-444e-8526-cefe79a1fd1c", "record_id": "flaws_cloudtrail:0000388:0a8bf8e5-d4a2-444e-8526-cefe79a1fd1c", "row_index": 388, "timestamp": "2017-05-27T03:09:26Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a8bf8e5-d4a2-444e-8526-cefe79a1fd1c", "eventTime": "2017-05-27T03:09:26Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76f7c5fe-e1ad-42e2-ba23-5fface3d5129", "record_id": "flaws_cloudtrail:0000389:76f7c5fe-e1ad-42e2-ba23-5fface3d5129", "row_index": 389, "timestamp": "2017-05-27T03:09:26Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76f7c5fe-e1ad-42e2-ba23-5fface3d5129", "eventTime": "2017-05-27T03:09:26Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3675f17c-54c5-4e83-97d8-5d9b9b6a6b3c", "record_id": "flaws_cloudtrail:0000390:3675f17c-54c5-4e83-97d8-5d9b9b6a6b3c", "row_index": 390, "timestamp": "2017-05-27T03:09:27Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3675f17c-54c5-4e83-97d8-5d9b9b6a6b3c", "eventTime": "2017-05-27T03:09:27Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d29def46-3200-40cc-a63c-3f7d338aa806", "record_id": "flaws_cloudtrail:0000391:d29def46-3200-40cc-a63c-3f7d338aa806", "row_index": 391, "timestamp": "2017-05-27T03:09:27Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA396VGD4O4KYYPM5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d29def46-3200-40cc-a63c-3f7d338aa806", "eventTime": "2017-05-27T03:09:27Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA396VGD4O4KYYPM5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de07afa0-5717-42ba-9158-e4cc7c76e5b0", "record_id": "flaws_cloudtrail:0000392:de07afa0-5717-42ba-9158-e4cc7c76e5b0", "row_index": 392, "timestamp": "2017-05-27T03:09:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de07afa0-5717-42ba-9158-e4cc7c76e5b0", "eventTime": "2017-05-27T03:09:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "expiration": "May 27, 2017 4:09:28 AM", "sessionToken": "FQoDYXdzECQaDHSd1sZd4SF7Oppu+yLMAWUYBTQWELSvZZV3LMw4EJ2MFgo+2DHCGorINDkZmNCd2BSJ5s3QteCuueQZJklaIA7qtr88K0ObbKumI+pg8lDQksSEUrtrR4og1vOfvv6Xtni0pMpQSB7o2ETR9wyHxYHMoKmuXGrAzElcpdFxi05k1YG316GULuTlMlkik0u87UMmrZYAIg0H5KI42AbzYLBVZ+HK3wlvlnOz+lop9G3dP+RoxfPRfCYT3D2hdZgnCVWm0+Xjqhy1/XDrAMh74OreLahNaC10rZMoQyjo26PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f653dae8-4769-4437-b5c4-e95c53ebfa5d", "record_id": "flaws_cloudtrail:0000393:f653dae8-4769-4437-b5c4-e95c53ebfa5d", "row_index": 393, "timestamp": "2017-05-27T03:09:29Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f653dae8-4769-4437-b5c4-e95c53ebfa5d", "eventTime": "2017-05-27T03:09:29Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c14ac86-c64f-4e7b-b6ee-73518eb43c3c", "record_id": "flaws_cloudtrail:0000394:0c14ac86-c64f-4e7b-b6ee-73518eb43c3c", "row_index": 394, "timestamp": "2017-05-27T03:09:30Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c14ac86-c64f-4e7b-b6ee-73518eb43c3c", "eventTime": "2017-05-27T03:09:30Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ce1c56-8e25-4598-831f-1fbb973cce6d", "record_id": "flaws_cloudtrail:0000395:c9ce1c56-8e25-4598-831f-1fbb973cce6d", "row_index": 395, "timestamp": "2017-05-27T03:09:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ce1c56-8e25-4598-831f-1fbb973cce6d", "eventTime": "2017-05-27T03:09:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "137cd366-4f4a-4fae-bde2-eb03d15e150a", "record_id": "flaws_cloudtrail:0000396:137cd366-4f4a-4fae-bde2-eb03d15e150a", "row_index": 396, "timestamp": "2017-05-27T03:09:33Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "137cd366-4f4a-4fae-bde2-eb03d15e150a", "eventTime": "2017-05-27T03:09:33Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e98c3a-5a20-45c1-b697-3eb18bbc35b1", "record_id": "flaws_cloudtrail:0000397:a5e98c3a-5a20-45c1-b697-3eb18bbc35b1", "row_index": 397, "timestamp": "2017-05-27T03:09:34Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e98c3a-5a20-45c1-b697-3eb18bbc35b1", "eventTime": "2017-05-27T03:09:34Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa2033d4-fc82-413a-ab31-a6a8a1a17f11", "record_id": "flaws_cloudtrail:0000398:fa2033d4-fc82-413a-ab31-a6a8a1a17f11", "row_index": 398, "timestamp": "2017-05-27T03:09:34Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa2033d4-fc82-413a-ab31-a6a8a1a17f11", "eventTime": "2017-05-27T03:09:34Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c008372-6de0-4602-a885-2331b4d3740a", "record_id": "flaws_cloudtrail:0000399:e9c008372-6de0-4602-a885-2331b4d3740a", "row_index": 399, "timestamp": "2017-05-27T03:09:35Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1063, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c008372-6de0-4602-a885-2331b4d3740a", "eventTime": "2017-05-27T03:09:35Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61ed244c-39d1-4aad-b462-0ef61398b", "record_id": "flaws_cloudtrail:0000400:61ed244c-39d1-4aad-b462-0ef61398b", "row_index": 400, "timestamp": "2017-05-27T03:09:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61ed244c-39d1-4aad-b462-0ef61398b", "eventTime": "2017-05-27T03:09:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9df12f56-6f3d-49bb-a93d-a59c3f3768ee", "record_id": "flaws_cloudtrail:0000401:9df12f56-6f3d-49bb-a93d-a59c3f3768ee", "row_index": 401, "timestamp": "2017-05-27T03:09:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9df12f56-6f3d-49bb-a93d-a59c3f3768ee", "eventTime": "2017-05-27T03:09:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b47bcfe-eabd-45f0-a4fc-f59f5fa6dc21", "record_id": "flaws_cloudtrail:0000402:4b47bcfe-eabd-45f0-a4fc-f59f5fa6dc21", "row_index": 402, "timestamp": "2017-05-27T03:09:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b47bcfe-eabd-45f0-a4fc-f59f5fa6dc21", "eventTime": "2017-05-27T03:09:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dd4486e-2e91-4ffd-86f5-46539be8d3", "record_id": "flaws_cloudtrail:0000403:7dd4486e-2e91-4ffd-86f5-46539be8d3", "row_index": 403, "timestamp": "2017-05-27T03:09:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dd4486e-2e91-4ffd-86f5-46539be8d3", "eventTime": "2017-05-27T03:09:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1d4338-ecdb-4f39-bfa9-6b8d3b71096f", "record_id": "flaws_cloudtrail:0000404:ea1d4338-ecdb-4f39-bfa9-6b8d3b71096f", "row_index": 404, "timestamp": "2017-05-27T03:09:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1d4338-ecdb-4f39-bfa9-6b8d3b71096f", "eventTime": "2017-05-27T03:09:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8963bd4-198c-4a8f-baaa-3bbc2eb5aef4", "record_id": "flaws_cloudtrail:0000405:a8963bd4-198c-4a8f-baaa-3bbc2eb5aef4", "row_index": 405, "timestamp": "2017-05-27T03:09:40Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8963bd4-198c-4a8f-baaa-3bbc2eb5aef4", "eventTime": "2017-05-27T03:09:40Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e86c3a9-9141-459f-82f5-ad5d3c7cee88", "record_id": "flaws_cloudtrail:0000406:8e86c3a9-9141-459f-82f5-ad5d3c7cee88", "row_index": 406, "timestamp": "2017-05-27T03:09:40Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BGCPRT9I4LNUA0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e86c3a9-9141-459f-82f5-ad5d3c7cee88", "eventTime": "2017-05-27T03:09:40Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BGCPRT9I4LNUA0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15cfaa7-a2eb-4758-859e-9229c9dbed44", "record_id": "flaws_cloudtrail:0000407:a15cfaa7-a2eb-4758-859e-9229c9dbed44", "row_index": 407, "timestamp": "2017-05-27T03:09:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15cfaa7-a2eb-4758-859e-9229c9dbed44", "eventTime": "2017-05-27T03:09:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54cb5ec2-8857-4a98-89bf-e14a3a27fdf6", "record_id": "flaws_cloudtrail:0000408:54cb5ec2-8857-4a98-89bf-e14a3a27fdf6", "row_index": 408, "timestamp": "2017-05-27T03:09:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54cb5ec2-8857-4a98-89bf-e14a3a27fdf6", "eventTime": "2017-05-27T03:09:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABBSEPOUZD3WY2JVL", "expiration": "May 27, 2017 4:09:41 AM", "sessionToken": "FQoDYXdzECQaDKp2PmXXZDJP9OniqCLMAdexulG8OTyuJfBCegHVPf6DvBj0KHIfPSHaYzlCXY9uOfXi9z1N3WKHshgZqOB+grpsPr6yx8hWDT2/NG9e8GAJMRicuGsRGsOkW53Dv5MxSVQcejWR5s/3od/JWJqxam5M4aVJkzS+HUWdYs4fRe38cGGcEyGDvJPjNYLJMAPjd6XMaIW6FbRENJtqYZ1Xfv54loB5rnWO0DlhZ+ON6FIPB2XI6Q5AM4X2rHcvJmKyGZfc1q6er38nwSeZiXdvDRQ9oFMKtg1KmezbPyj126PJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70fce24a-e554-4497-ac97-7e1f43ec4333", "record_id": "flaws_cloudtrail:0000409:70fce24a-e554-4497-ac97-7e1f43ec4333", "row_index": 409, "timestamp": "2017-05-27T03:09:42Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70fce24a-e554-4497-ac97-7e1f43ec4333", "eventTime": "2017-05-27T03:09:42Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f88e3ce-aed8-4822-abb7-7be3c70e8112", "record_id": "flaws_cloudtrail:0000410:3f88e3ce-aed8-4822-abb7-7be3c70e8112", "row_index": 410, "timestamp": "2017-05-27T03:09:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f88e3ce-aed8-4822-abb7-7be3c70e8112", "eventTime": "2017-05-27T03:09:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996219-eb8a-406b-856d-c40ee58fae61", "record_id": "flaws_cloudtrail:0000411:996219-eb8a-406b-856d-c40ee58fae61", "row_index": 411, "timestamp": "2017-05-27T03:09:45Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996219-eb8a-406b-856d-c40ee58fae61", "eventTime": "2017-05-27T03:09:45Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e275723-bc1a-4d8f-87e4-47f54c7de3a6", "record_id": "flaws_cloudtrail:0000412:7e275723-bc1a-4d8f-87e4-47f54c7de3a6", "row_index": 412, "timestamp": "2017-05-27T03:09:46Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e275723-bc1a-4d8f-87e4-47f54c7de3a6", "eventTime": "2017-05-27T03:09:46Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74b84864-fbcd-4923-8bd1-3d172082fa8a", "record_id": "flaws_cloudtrail:0000413:74b84864-fbcd-4923-8bd1-3d172082fa8a", "row_index": 413, "timestamp": "2017-05-27T03:09:47Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74b84864-fbcd-4923-8bd1-3d172082fa8a", "eventTime": "2017-05-27T03:09:47Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9e61bc-0880-45f7-82e2-efee430f8d8a", "record_id": "flaws_cloudtrail:0000414:3c9e61bc-0880-45f7-82e2-efee430f8d8a", "row_index": 414, "timestamp": "2017-05-27T03:09:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9e61bc-0880-45f7-82e2-efee430f8d8a", "eventTime": "2017-05-27T03:09:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4897d763-5ebc-4e34-8fcf-d4b63d6bccfe", "record_id": "flaws_cloudtrail:0000415:4897d763-5ebc-4e34-8fcf-d4b63d6bccfe", "row_index": 415, "timestamp": "2017-05-27T03:09:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4897d763-5ebc-4e34-8fcf-d4b63d6bccfe", "eventTime": "2017-05-27T03:09:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd97d31-0d9b-4a23-8e86-bc837561ab355", "record_id": "flaws_cloudtrail:0000416:5bd97d31-0d9b-4a23-8e86-bc837561ab355", "row_index": 416, "timestamp": "2017-05-27T03:09:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd97d31-0d9b-4a23-8e86-bc837561ab355", "eventTime": "2017-05-27T03:09:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "842f44bb-c040-4b59-806b-ffcb7e83cc86", "record_id": "flaws_cloudtrail:0000417:842f44bb-c040-4b59-806b-ffcb7e83cc86", "row_index": 417, "timestamp": "2017-05-27T03:09:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "842f44bb-c040-4b59-806b-ffcb7e83cc86", "eventTime": "2017-05-27T03:09:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "527443-d475-40f8-877e-11d67d2e5aac", "record_id": "flaws_cloudtrail:0000418:527443-d475-40f8-877e-11d67d2e5aac", "row_index": 418, "timestamp": "2017-05-27T03:09:50Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "527443-d475-40f8-877e-11d67d2e5aac", "eventTime": "2017-05-27T03:09:50Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0a21ae8-0593-469d-9167-aec313308e893", "record_id": "flaws_cloudtrail:0000419:f0a21ae8-0593-469d-9167-aec313308e893", "row_index": 419, "timestamp": "2017-05-27T03:09:50Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABBSEPOUZD3WY2JVL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0a21ae8-0593-469d-9167-aec313308e893", "eventTime": "2017-05-27T03:09:50Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABBSEPOUZD3WY2JVL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:09:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d087354-9cc2-4a8d-93b7-8bb4d2c3d3e4", "record_id": "flaws_cloudtrail:0000420:9d087354-9cc2-4a8d-93b7-8bb4d2c3d3e4", "row_index": 420, "timestamp": "2017-05-27T03:12:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 559, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d087354-9cc2-4a8d-93b7-8bb4d2c3d3e4", "eventTime": "2017-05-27T03:12:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59335b2b-b5ee-4e7f-b0ea-82f34f19460c", "record_id": "flaws_cloudtrail:0000421:59335b2b-b5ee-4e7f-b0ea-82f34f19460c", "row_index": 421, "timestamp": "2017-05-27T03:12:40Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 588, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59335b2b-b5ee-4e7f-b0ea-82f34f19460c", "eventTime": "2017-05-27T03:12:40Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4086f796-d0a4-4959-8a31-abb59314a335", "record_id": "flaws_cloudtrail:0000422:4086f796-d0a4-4959-8a31-abb59314a335", "row_index": 422, "timestamp": "2017-05-27T03:13:26Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 588, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4086f796-d0a4-4959-8a31-abb59314a335", "eventTime": "2017-05-27T03:13:26Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3834d56c-f488-4674-9156-d9912d1a527b", "record_id": "flaws_cloudtrail:0000423:3834d56c-f488-4674-9156-d9912d1a527b", "row_index": 423, "timestamp": "2017-05-27T03:14:05Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 591, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3834d56c-f488-4674-9156-d9912d1a527b", "eventTime": "2017-05-27T03:14:05Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59be80a2-97db-433e-8243-20573ceeda", "record_id": "flaws_cloudtrail:0000424:59be80a2-97db-433e-8243-20573ceeda", "row_index": 424, "timestamp": "2017-05-27T03:14:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59be80a2-97db-433e-8243-20573ceeda", "eventTime": "2017-05-27T03:14:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4IIM2OC9F7JIIBHE", "expiration": "May 27, 2017 4:14:38 AM", "sessionToken": "FQoDYXdzECQaDHdcpGbJN9kaMGfpvCLMAXxARpm8Znp1EJupddDo1KTfyjZSuX7Q+o3ryaaUf3bvfEOMSuVvr5nB678drPZPnEc990Ae8EaKuygCMRELBgLKaRPcO5TjuUksUKpXACYDvpKj0MArxw9rFpXVkgwQn2Fhw9nTkirusUQZ84Hacdd0pN6XaINHpP69G9GlsPA6z/eTPGYMAryj8vYRtPS8n2a3+vKRS5utP0P2ZyLz0j75W4V7oaN71DTrW1PAbT+zT0rWyvBk3MWHqzAVpiImIHemr94sktnXNh3Y6Cie3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "607fa764-5b68-40b4-9bfb-7e86e816995f", "record_id": "flaws_cloudtrail:0000425:607fa764-5b68-40b4-9bfb-7e86e816995f", "row_index": 425, "timestamp": "2017-05-27T03:14:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4IIM2OC9F7JIIBHE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "607fa764-5b68-40b4-9bfb-7e86e816995f", "eventTime": "2017-05-27T03:14:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4IIM2OC9F7JIIBHE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fa65d90-e602-4b2e-8e72-e5a419303a9", "record_id": "flaws_cloudtrail:0000426:9fa65d90-e602-4b2e-8e72-e5a419303a9", "row_index": 426, "timestamp": "2017-05-27T03:14:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fa65d90-e602-4b2e-8e72-e5a419303a9", "eventTime": "2017-05-27T03:14:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKPP1OKEJV0K7ZRTD", "expiration": "May 27, 2017 4:14:39 AM", "sessionToken": "FQoDYXdzECQaDDs6hMqNBn+rNDKX9yLMATERfIPJDXn6AHRfAFV7ru/t0IvPf2hU+xsomlgcK9ckFavPnV7031IUZ3HLseE3b5sMJNWXIUtWu69TLKQoNc96z1LKyyYYxyQgMgWZgMOvw9U+lsoGT52C2NlGYvL4XDu5W7+9oDcoRB8VnPR7efX2zT0aYD+fXkpq2zIP08zSDu8ShqVgy64Wa0sDvxEjzgJcGkelMoySuQsQEYrPxhi+TvHTDYdeuEvqbNV1bkbVKZWYBmX1QmRyd1TuCWEbaGgGpfv5DxmLp+84ziif3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9367fcce-5c66-4f5b-a9de-d7a6ab5ddcfb", "record_id": "flaws_cloudtrail:0000427:9367fcce-5c66-4f5b-a9de-d7a6ab5ddcfb", "row_index": 427, "timestamp": "2017-05-27T03:14:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKPP1OKEJV0K7ZRTD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9367fcce-5c66-4f5b-a9de-d7a6ab5ddcfb", "eventTime": "2017-05-27T03:14:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKPP1OKEJV0K7ZRTD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0380f49d-0454-4d21-909b-cc68d0e095a0", "record_id": "flaws_cloudtrail:0000428:0380f49d-0454-4d21-909b-cc68d0e095a0", "row_index": 428, "timestamp": "2017-05-27T03:14:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKPP1OKEJV0K7ZRTD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0380f49d-0454-4d21-909b-cc68d0e095a0", "eventTime": "2017-05-27T03:14:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKPP1OKEJV0K7ZRTD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7308dff-8921-4cae-a153-7209f8c69fd6", "record_id": "flaws_cloudtrail:0000429:e7308dff-8921-4cae-a153-7209f8c69fd6", "row_index": 429, "timestamp": "2017-05-27T03:14:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4IIM2OC9F7JIIBHE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7308dff-8921-4cae-a153-7209f8c69fd6", "eventTime": "2017-05-27T03:14:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4IIM2OC9F7JIIBHE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89df1a58-c1a3-4eac-a2cb-b266780442f2", "record_id": "flaws_cloudtrail:0000430:89df1a58-c1a3-4eac-a2cb-b266780442f2", "row_index": 430, "timestamp": "2017-05-27T03:14:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89df1a58-c1a3-4eac-a2cb-b266780442f2", "eventTime": "2017-05-27T03:14:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7OI63L0HYB52PL20", "expiration": "May 27, 2017 4:14:40 AM", "sessionToken": "FQoDYXdzECQaDGOv9VNh0O9xdeRdXCLMARfKZz1z1K4Qa1/EhVNzoHuT4KUW4E3FLdNKmvecV1kRSFg5VvVQDK+XaAxw27BqbrkkC1alycH5naQbLnI2uX9FqisnbVAPDpmtMDvnPt/sWAm1cF4zRhBoErhLfv9rZDouWvGpw5nK5sz28dpayLiHYqZU65PYuK2qXvl6JIBFUWhi12sxSSnw548YREqnwieVhbq5e+MfM/kOCtH1uPf2oNGmWT9DPXgAFQ+g2ciBfS9tnAJm1WRkI1jkT/Y2k2LxlisYmFObBLPC4iig3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94d6db9-a8fc-422f-8863-b95ff2c5ce15", "record_id": "flaws_cloudtrail:0000431:e94d6db9-a8fc-422f-8863-b95ff2c5ce15", "row_index": 431, "timestamp": "2017-05-27T03:14:41Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7OI63L0HYB52PL20", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94d6db9-a8fc-422f-8863-b95ff2c5ce15", "eventTime": "2017-05-27T03:14:41Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7OI63L0HYB52PL20", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daecdb6e-6e3a-43ba-97de-61888ef3c0a3", "record_id": "flaws_cloudtrail:0000432:daecdb6e-6e3a-43ba-97de-61888ef3c0a3", "row_index": 432, "timestamp": "2017-05-27T03:14:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7OI63L0HYB52PL20", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daecdb6e-6e3a-43ba-97de-61888ef3c0a3", "eventTime": "2017-05-27T03:14:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7OI63L0HYB52PL20", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e69b061-325d-4ac2-b90b-23d88149c726", "record_id": "flaws_cloudtrail:0000433:4e69b061-325d-4ac2-b90b-23d88149c726", "row_index": 433, "timestamp": "2017-05-27T03:14:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e69b061-325d-4ac2-b90b-23d88149c726", "eventTime": "2017-05-27T03:14:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7NB9UUL07IW19CVW", "expiration": "May 27, 2017 4:14:41 AM", "sessionToken": "FQoDYXdzECQaDMTyxBjUrrllVIJcaiLMAd2QnqiR13rlqNq5bRNJMLeWYKyB+OA2l5awdex4UdNtlIi+HVqsNwSDFTSNvNnqHUveH1McrUdFvHaQwEttLAxwPKanP/37jTzyrJqhZWNx7GiP+7yUTani4I98X7knL6XmKE6WEc8DKM7Byb5obS8ceceFKOL3fd1g0rY4GrVMdmdKeXawkBuI+iEUCWyOiUzHLvfetuOMdxnipb077eDwXbCqhqTqtJK+Mamg3flfWCHJ4uJDmTzvTjGcDq5GnDfDx0wtTPVECubZXiih3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ea9252-4b64-439a-8abc-6bb346298f8b", "record_id": "flaws_cloudtrail:0000434:71ea9252-4b64-439a-8abc-6bb346298f8b", "row_index": 434, "timestamp": "2017-05-27T03:14:42Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7NB9UUL07IW19CVW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ea9252-4b64-439a-8abc-6bb346298f8b", "eventTime": "2017-05-27T03:14:42Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7NB9UUL07IW19CVW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db00f0b3-10c3-471f-8920-54fc11d2e4b8", "record_id": "flaws_cloudtrail:0000435:db00f0b3-10c3-471f-8920-54fc11d2e4b8", "row_index": 435, "timestamp": "2017-05-27T03:14:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7NB9UUL07IW19CVW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db00f0b3-10c3-471f-8920-54fc11d2e4b8", "eventTime": "2017-05-27T03:14:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7NB9UUL07IW19CVW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37421ceb-f418-4482-b5c1-7f5abad48cd7", "record_id": "flaws_cloudtrail:0000436:37421ceb-f418-4482-b5c1-7f5abad48cd7", "row_index": 436, "timestamp": "2017-05-27T03:14:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37421ceb-f418-4482-b5c1-7f5abad48cd7", "eventTime": "2017-05-27T03:14:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAQJVZPBPRS5UQGWE", "expiration": "May 27, 2017 4:14:43 AM", "sessionToken": "FQoDYXdzECQaDGxNsvK85ieMZqJgzSLMAXJ9uafbXmVKU4gd2hnIem5l0Sp4EefMMzqs6K6z2BNShK3SLmePl91ofsiyQZF433/4Wxu8e+Dvx26rlXj7RYKBcMhHef9rHSLwJtRCezPcxrN2lAe344313efupETp1zinXLfV+1cNIU48hDl6lpiCuWKaYF2Av/PJrQ5FRBt2IYjQ4jYZc+cEHK6kNrpcROljvMg7HX9fOowQ0FgGrJgf80mcakrET3OesZtLPB7OeSNfJN7qKlTG4ek7KV2cbMURlXiIC2oRcmXPPiij3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccaa5bea-12c0-44ed-9245-da4dd4941c83", "record_id": "flaws_cloudtrail:0000437:ccaa5bea-12c0-44ed-9245-da4dd4941c83", "row_index": 437, "timestamp": "2017-05-27T03:14:44Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAQJVZPBPRS5UQGWE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccaa5bea-12c0-44ed-9245-da4dd4941c83", "eventTime": "2017-05-27T03:14:44Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAQJVZPBPRS5UQGWE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3008d78-6d4d-4e0d-a525-16e3cf40f899", "record_id": "flaws_cloudtrail:0000438:c3008d78-6d4d-4e0d-a525-16e3cf40f899", "row_index": 438, "timestamp": "2017-05-27T03:14:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAQJVZPBPRS5UQGWE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3008d78-6d4d-4e0d-a525-16e3cf40f899", "eventTime": "2017-05-27T03:14:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAQJVZPBPRS5UQGWE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e55e2331-4d48-4a8c-9a8c-55e5c6bf5581", "record_id": "flaws_cloudtrail:0000439:e55e2331-4d48-4a8c-9a8c-55e5c6bf5581", "row_index": 439, "timestamp": "2017-05-27T03:14:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e55e2331-4d48-4a8c-9a8c-55e5c6bf5581", "eventTime": "2017-05-27T03:14:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG7WE37S89RI60LV5", "expiration": "May 27, 2017 4:14:44 AM", "sessionToken": "FQoDYXdzECQaDOdoink5BTaV7VnLYCLMAf2/Sbm8msqUXzypHaKQlL2FZAMTkftwZzn949BsqwnqCzbI2yH0js2WC1GNiyhis2gB2qJK3MbJpuPfOIyfOcdUi7kVmGl/nqfm1OejvPCz9g7WMbzywxTyqBbCEcGEKPWGROK4Dtb/bktxnE8y2OUSGMkM2cJBGm5iOBrUP2W+9RU2hwzF2rhnQ7jZNBWgwbkI6qniBvlUegHbT9jmByFtLPJSfsBhGKJ2pp8XUKD0ljlQjQEVgWfy5DRqdU3BKrt4OaGveBPIaKemCCik3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3482ccd3-00c2-41f3-af94-a8973ca2919f", "record_id": "flaws_cloudtrail:0000440:3482ccd3-00c2-41f3-af94-a8973ca2919f", "row_index": 440, "timestamp": "2017-05-27T03:14:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG7WE37S89RI60LV5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3482ccd3-00c2-41f3-af94-a8973ca2919f", "eventTime": "2017-05-27T03:14:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG7WE37S89RI60LV5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef06b209-05af-4bd6-8a49-faaca9aa958b", "record_id": "flaws_cloudtrail:0000441:ef06b209-05af-4bd6-8a49-faaca9aa958b", "row_index": 441, "timestamp": "2017-05-27T03:14:45Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG7WE37S89RI60LV5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef06b209-05af-4bd6-8a49-faaca9aa958b", "eventTime": "2017-05-27T03:14:45Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG7WE37S89RI60LV5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c89ebb1e-1858-43cb-be1b-f1e64b4db3f2", "record_id": "flaws_cloudtrail:0000442:c89ebb1e-1858-43cb-be1b-f1e64b4db3f2", "row_index": 442, "timestamp": "2017-05-27T03:14:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c89ebb1e-1858-43cb-be1b-f1e64b4db3f2", "eventTime": "2017-05-27T03:14:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACKAQ1E0Y23U0M45S", "expiration": "May 27, 2017 4:14:46 AM", "sessionToken": "FQoDYXdzECQaDCoylDlZoTYl7dk9BiLMAcTKlW9S+ofwsHYFOfSYiW29EBh70qN63QumETajtbOrvivO9YAGi4PhgzIT8ROWOf5M3VDeaR6uX5+1EQja23frE5s2J9uX6yNsoMKhL8YZL4zTYjiMZDatmJtfBzuUaQBzWeFL0wv08NeokH+iX5QVT3pb/uUUYWR9lqSLl0mL7S2hqP3NcfRAP4gRnCHmgjuvPGLGcvjtnLmjLxFfC5/q1Fz1ta9OhBNzZLW5/uAFOtfgeJ8EudH03Q1UOismpjksFKihMXw35ehbNyim3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a947bd-3e5e-4486-b3b0-84ce888dab23", "record_id": "flaws_cloudtrail:0000443:c5a947bd-3e5e-4486-b3b0-84ce888dab23", "row_index": 443, "timestamp": "2017-05-27T03:14:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACKAQ1E0Y23U0M45S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a947bd-3e5e-4486-b3b0-84ce888dab23", "eventTime": "2017-05-27T03:14:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACKAQ1E0Y23U0M45S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "221946a24-79ac-421c-9744-9872a1c1f898", "record_id": "flaws_cloudtrail:0000444:221946a24-79ac-421c-9744-9872a1c1f898", "row_index": 444, "timestamp": "2017-05-27T03:14:46Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACKAQ1E0Y23U0M45S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "221946a24-79ac-421c-9744-9872a1c1f898", "eventTime": "2017-05-27T03:14:46Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACKAQ1E0Y23U0M45S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66f2c01b-9d87-4af7-be23-71239c29e", "record_id": "flaws_cloudtrail:0000445:66f2c01b-9d87-4af7-be23-71239c29e", "row_index": 445, "timestamp": "2017-05-27T03:14:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66f2c01b-9d87-4af7-be23-71239c29e", "eventTime": "2017-05-27T03:14:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG2WSTVAEJL3LM4TU", "expiration": "May 27, 2017 4:14:47 AM", "sessionToken": "FQoDYXdzECQaDCWVjQaKIn/YNggGSiLMAY1K5N1LPfdg7f021ftO+PSN2ykjjDnfOzSHqjf46zdqIK46Mr/lvwt46pz7xBzJYlOhdYUlQ6I/KW99DPurpQut0P8Y+T3k2GA3feDIt4qAIF+MUVx5VgSZC9REze9mG7saoI5RNjXIimbtcNk8iei9sV1donKnIS6DWMY6wQ1jUKnWPwGOvDCucY72AjgupIhXS+Qy+1ZU2RBvH9wU836APl104GsT5pa8VkZ5OZd611jx5KX1/qN0mN0x+d/P9JipX6jJKbRKTqukISin3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1067c4ec-0448-4b93-9fd6-557cc74eecde", "record_id": "flaws_cloudtrail:0000446:1067c4ec-0448-4b93-9fd6-557cc74eecde", "row_index": 446, "timestamp": "2017-05-27T03:14:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG2WSTVAEJL3LM4TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1067c4ec-0448-4b93-9fd6-557cc74eecde", "eventTime": "2017-05-27T03:14:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG2WSTVAEJL3LM4TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aa44f28-fc8f-422f-9020-04c3c4328e0e", "record_id": "flaws_cloudtrail:0000447:2aa44f28-fc8f-422f-9020-04c3c4328e0e", "row_index": 447, "timestamp": "2017-05-27T03:14:48Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG2WSTVAEJL3LM4TU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aa44f28-fc8f-422f-9020-04c3c4328e0e", "eventTime": "2017-05-27T03:14:48Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG2WSTVAEJL3LM4TU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032592e5d-adc0-4012-aeda-9e6383d9c167", "record_id": "flaws_cloudtrail:0000448:032592e5d-adc0-4012-aeda-9e6383d9c167", "row_index": 448, "timestamp": "2017-05-27T03:14:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4ZK60TGGRS0ZBY5I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032592e5d-adc0-4012-aeda-9e6383d9c167", "eventTime": "2017-05-27T03:14:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4ZK60TGGRS0ZBY5I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6af6e86c-ad34-4002-8ce8-8789ca52a5fe", "record_id": "flaws_cloudtrail:0000449:6af6e86c-ad34-4002-8ce8-8789ca52a5fe", "row_index": 449, "timestamp": "2017-05-27T03:14:49Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4ZK60TGGRS0ZBY5I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6af6e86c-ad34-4002-8ce8-8789ca52a5fe", "eventTime": "2017-05-27T03:14:49Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4ZK60TGGRS0ZBY5I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd41fd97-a746-4708-848a-a24037801470", "record_id": "flaws_cloudtrail:0000450:dd41fd97-a746-4708-848a-a24037801470", "row_index": 450, "timestamp": "2017-05-27T03:14:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd41fd97-a746-4708-848a-a24037801470", "eventTime": "2017-05-27T03:14:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4ZK60TGGRS0ZBY5I", "expiration": "May 27, 2017 4:14:49 AM", "sessionToken": "FQoDYXdzECQaDC/0Kx2HdZLaR3jN9iLMAWEeBb7qp9VG3gNE17OSW9r4aSHTSP5XTiv7N5+8S3w3knDWcEidcn2a4U25m4uFZ59c0XXnjaKDkTi+l0eCJgAadXiwJRXwvC3xDxA8tfVw3GUIHAzjMp9C0RKk13mCBz4+L3X4HSikMgliZfw3epUFYThTQwOV8p4GTFzqeuN0Yf1lxsHcbVK7WyGXAlFXW1bEn1oNtAWoe9q4441mG6QAOV4ouN7VWG6M1SrplshpDzyg0RsIxrgoV09DbXpZUhtkTMsZWtaf7mfzqCip3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac8b83b-d896-4df7-a8f3-67aee42f9a1f", "record_id": "flaws_cloudtrail:0000451:aac8b83b-d896-4df7-a8f3-67aee42f9a1f", "row_index": 451, "timestamp": "2017-05-27T03:14:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac8b83b-d896-4df7-a8f3-67aee42f9a1f", "eventTime": "2017-05-27T03:14:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI5BBK3WWOJ0PLML8", "expiration": "May 27, 2017 4:14:49 AM", "sessionToken": "FQoDYXdzECQaDCg/S8c2iR8XNkK+3yLMAcB6ADDC93EJbhXJRBL4uHiqTDHhwyS65WGlYzSqbOs0+ZK0pRkKOpey7PXhmpJXgn7AMWmCcpmLrwP3/LQCsm6vQ7Kp4+QOzwTx+YWwk61nYv8O/PyaeTZ6rRImIjJ9gRi6NI2liW8YKjTJ6m7N6NfBvrEyHGHcU0DWwYxzf4RVX0glqqyNcmP4IM787x+DP9KZj22fQeO33IHDaWpHgf/KqdQdzSG28zIntFw3yfMyvFvsku2dyt9DXq2LhpxKcMyY2u4Et5aAHMdiciip3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef4c0e1-3159-4c4f-ba26-69b8796c250d", "record_id": "flaws_cloudtrail:0000452:2ef4c0e1-3159-4c4f-ba26-69b8796c250d", "row_index": 452, "timestamp": "2017-05-27T03:14:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef4c0e1-3159-4c4f-ba26-69b8796c250d", "eventTime": "2017-05-27T03:14:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAX5D7OAHA4HMJO6ZV", "expiration": "May 27, 2017 4:14:51 AM", "sessionToken": "FQoDYXdzECQaDGKdwvTX3kjnRAeopiLMAfSIKG8Z5/rP2FYQOnS8STuZCEAzeTAv9exXtR9+8er7SP2cuC4YRKcVjxwPw+uJfKKqBGB8cL0EIxVAKb6YqZfALARrniRow0DC90jKZHb0uY1BfysSVCuuTMbQUGLG04BqLU0WUYR6O8UfTVJAr91dddlGUT0khQ3WP+3Wq5oQEBMOTNwzFbEJgKCeh+tp27QK0s5RNFEUJZV82qWYtAOo1t8gb2WlmQmHWY0XLzJn89C6d4m3gv/UIBGRqmX5Z3eGu3dEt4K4sTwAniir3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c048728-8b78-45d4-bbcc-cb7c63d2f21c", "record_id": "flaws_cloudtrail:0000453:40c048728-8b78-45d4-bbcc-cb7c63d2f21c", "row_index": 453, "timestamp": "2017-05-27T03:14:51Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAX5D7OAHA4HMJO6ZV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c048728-8b78-45d4-bbcc-cb7c63d2f21c", "eventTime": "2017-05-27T03:14:51Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAX5D7OAHA4HMJO6ZV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7013a4-61a7-4219-8252-b07d2149b653", "record_id": "flaws_cloudtrail:0000454:3c7013a4-61a7-4219-8252-b07d2149b653", "row_index": 454, "timestamp": "2017-05-27T03:14:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAX5D7OAHA4HMJO6ZV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7013a4-61a7-4219-8252-b07d2149b653", "eventTime": "2017-05-27T03:14:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAX5D7OAHA4HMJO6ZV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09657a-80dc-4547-b49c-d32fb31bad79", "record_id": "flaws_cloudtrail:0000455:09657a-80dc-4547-b49c-d32fb31bad79", "row_index": 455, "timestamp": "2017-05-27T03:14:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09657a-80dc-4547-b49c-d32fb31bad79", "eventTime": "2017-05-27T03:14:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFHZPH1C2O53YQQDU", "expiration": "May 27, 2017 4:14:52 AM", "sessionToken": "FQoDYXdzECQaDBWAwfwDrM9Du4A//iLMAQ0ynWKA1yLushXUbMGpgU4ePgXUZ9KJd8kWa/GPD8JcGao2+T6PYrmJ7dyEM2COY8lChcETpQUz6Q9MAsjWKtqgnIkimfp4gZ61p0tR80v8FIoLS86wYKBbFIq5+cIdVFUW0Y7M4SSMQa45Q1YntkKu0kXujvyBHRefVz8KPSRq8VyF62In5ut2q70k9iNqyBUrdcgrEGQGNm+7N0GesJHZ2vUUOhnufQBJQAN5twt+uDZlWPk92LMcCv8s2tTIyGx1To3j1XrG/98lgCis3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8219a129-b115-497e-a6cb-c9e5f1165c6b", "record_id": "flaws_cloudtrail:0000456:8219a129-b115-497e-a6cb-c9e5f1165c6b", "row_index": 456, "timestamp": "2017-05-27T03:14:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8219a129-b115-497e-a6cb-c9e5f1165c6b", "eventTime": "2017-05-27T03:14:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2YGPDPYXA1EFK5WY", "expiration": "May 27, 2017 4:14:52 AM", "sessionToken": "FQoDYXdzECQaDCZArZwA5J5PHRAAhCLMAcSG67siIx/GPVqeObGLo7n4Rc/IRMecL7ahegoOG9ck2g2ptGerqllzVckSd6nEa6bWJEC2QZQ8fK/7fkR08vVjmoXnqZ1fSBg69BcISOnMsKnbdYQ893XPwXp99v4CrcaeIk5OWKkHsHNuWLFoEYPb/1NlRueg4k7HD8wsQd9UCeDESLSgvsMRGlgckOFjix2cnsGnd2IOPsZZXKu3m8S8jQPmY0FRt3plbBPDaMe3giXI06U+3W+32TiLswQgYd/5uKORY2QOmvCeCSis3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064239b43-9f5c-46e0-afea-bb6f4e5987d2", "record_id": "flaws_cloudtrail:0000457:064239b43-9f5c-46e0-afea-bb6f4e5987d2", "row_index": 457, "timestamp": "2017-05-27T03:14:54Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFHZPH1C2O53YQQDU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064239b43-9f5c-46e0-afea-bb6f4e5987d2", "eventTime": "2017-05-27T03:14:54Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFHZPH1C2O53YQQDU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afff334f-79eb-4d61-837a-89ebb7e0581a", "record_id": "flaws_cloudtrail:0000458:afff334f-79eb-4d61-837a-89ebb7e0581a", "row_index": 458, "timestamp": "2017-05-27T03:14:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFHZPH1C2O53YQQDU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afff334f-79eb-4d61-837a-89ebb7e0581a", "eventTime": "2017-05-27T03:14:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFHZPH1C2O53YQQDU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d12a0875-a342-4785-90e0-d9be5dcf8826", "record_id": "flaws_cloudtrail:0000459:d12a0875-a342-4785-90e0-d9be5dcf8826", "row_index": 459, "timestamp": "2017-05-27T03:14:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d12a0875-a342-4785-90e0-d9be5dcf8826", "eventTime": "2017-05-27T03:14:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR3E0VQJTVURHGC3A", "expiration": "May 27, 2017 4:14:54 AM", "sessionToken": "FQoDYXdzECQaDAi2NuLXsXIehovIXiLMAWjun6oBoO1sBHLP0l77J13ZgJxpEcseO+urEa8OZcPOxuuB0qqYb+eDBP5qZeM9wI8NxmgUuC+iCY3sc3hS6SFk+wf3sYxypqkEqzZ7gWuqEQenSPB3W1matGR/iS5PIiy14s4nh2/gkWIx20zbQ+wePeLNjUUP/rMagDqOqXPMnKBrNPU+L3gUMMflQ2ayPwr5egB4k8LPMrfdpacNpcT8ZvLHaPZUtKUfHFqX4BxdVYI7CWERIflm3gvwOoOCUpTIeV3fSY5KAzCA/iiu3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb19d34-c833-43a1-9e45-a17b181aba70", "record_id": "flaws_cloudtrail:0000460:2cb19d34-c833-43a1-9e45-a17b181aba70", "row_index": 460, "timestamp": "2017-05-27T03:14:55Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAR3E0VQJTVURHGC3A", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb19d34-c833-43a1-9e45-a17b181aba70", "eventTime": "2017-05-27T03:14:55Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAR3E0VQJTVURHGC3A", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cb96cb1-2503-46d8-95e5-1bf5870c4d62", "record_id": "flaws_cloudtrail:0000461:9cb96cb1-2503-46d8-95e5-1bf5870c4d62", "row_index": 461, "timestamp": "2017-05-27T03:14:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAR3E0VQJTVURHGC3A", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cb96cb1-2503-46d8-95e5-1bf5870c4d62", "eventTime": "2017-05-27T03:14:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAR3E0VQJTVURHGC3A", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f496276e-aee6-4dd8-8ea1-8fc881245", "record_id": "flaws_cloudtrail:0000462:1f496276e-aee6-4dd8-8ea1-8fc881245", "row_index": 462, "timestamp": "2017-05-27T03:14:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f496276e-aee6-4dd8-8ea1-8fc881245", "eventTime": "2017-05-27T03:14:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAST3QRV0E1MCPKFJ5", "expiration": "May 27, 2017 4:14:56 AM", "sessionToken": "FQoDYXdzECQaDEwF6s/Z7pyExAhNiiLMATpwq+ELJKAclQRyAQdbkp/nHSkXNqnduGAkN3BLMvoDNGLx+fiYvvKdJDVtHnlDkom0+JErcDvN8piZSeL3tEAbymDISxwf07jleNW4HFlwpYtFhKxNnd1AzfHD/hc6WdK1sbparaH+EGXbsNHV0OwJdIp1vN5TR1Mj6SJ4m1k7yHRGJ4ciHIzlAOrj1oQ2uv+PwZa7ddusaGEPgrL9fUr2L7Ll2BbK1fBwt5vXDaIMHDINrTnrPICmpjeXT+JESrTjmhP0KM3adiFEICiw3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "add1a2c8-5601-4941-8b1f-1da55f27755d", "record_id": "flaws_cloudtrail:0000463:add1a2c8-5601-4941-8b1f-1da55f27755d", "row_index": 463, "timestamp": "2017-05-27T03:14:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAST3QRV0E1MCPKFJ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "add1a2c8-5601-4941-8b1f-1da55f27755d", "eventTime": "2017-05-27T03:14:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAST3QRV0E1MCPKFJ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8977f997-5630-41c5-9595-b4220d1be8b8", "record_id": "flaws_cloudtrail:0000464:8977f997-5630-41c5-9595-b4220d1be8b8", "row_index": 464, "timestamp": "2017-05-27T03:14:57Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAST3QRV0E1MCPKFJ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8977f997-5630-41c5-9595-b4220d1be8b8", "eventTime": "2017-05-27T03:14:57Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAST3QRV0E1MCPKFJ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b0840e-bffd-46e9-b5a8-504983cfa299e", "record_id": "flaws_cloudtrail:0000465:55b0840e-bffd-46e9-b5a8-504983cfa299e", "row_index": 465, "timestamp": "2017-05-27T03:14:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b0840e-bffd-46e9-b5a8-504983cfa299e", "eventTime": "2017-05-27T03:14:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1Y32FLP7XCFHDJSC", "expiration": "May 27, 2017 4:14:57 AM", "sessionToken": "FQoDYXdzECQaDBy0r5IO1E/v9topVCLMAeqDqEez7EqbDjq2N8kBhBrdN1FbIn2OaibqNt9aC37YLJWPdLJrl5SbovB3UmY5Pgr8Ksu+kTeDIfrYKFQJASmAOntraPbABh2jIGKG2qrWti4jjkmDA+KUXZL4eITBGU5G2hUXG9YUBHf9w0rLgDzaETn8uW5jczFhVIQeu+9JWMCqc7jzFPhGWUTRvpIoo1RUe0phAsKhi92gaHru5eBO9eL5Ij/ya+gKmUSeTSwp0IOlC4NFfcUQEdrCw6s5qecABXtw74czHHkFniix3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a07d23d-9046-4b51-b52c-dc97c4431a91", "record_id": "flaws_cloudtrail:0000466:1a07d23d-9046-4b51-b52c-dc97c4431a91", "row_index": 466, "timestamp": "2017-05-27T03:14:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1Y32FLP7XCFHDJSC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a07d23d-9046-4b51-b52c-dc97c4431a91", "eventTime": "2017-05-27T03:14:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1Y32FLP7XCFHDJSC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbe186d-8c9a-4f86-8326-b60ae2d0403a", "record_id": "flaws_cloudtrail:0000467:ebbe186d-8c9a-4f86-8326-b60ae2d0403a", "row_index": 467, "timestamp": "2017-05-27T03:14:58Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1Y32FLP7XCFHDJSC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbe186d-8c9a-4f86-8326-b60ae2d0403a", "eventTime": "2017-05-27T03:14:58Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1Y32FLP7XCFHDJSC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c030db27-f103-48f2-af97-513020ce15c", "record_id": "flaws_cloudtrail:0000468:c030db27-f103-48f2-af97-513020ce15c", "row_index": 468, "timestamp": "2017-05-27T03:14:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c030db27-f103-48f2-af97-513020ce15c", "eventTime": "2017-05-27T03:14:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6XLPVDDHRSDFXBSV", "expiration": "May 27, 2017 4:14:58 AM", "sessionToken": "FQoDYXdzECQaDFCWoLjFxCsdsAgd3SLMAZHaDiYs36WErF+vapFZ/VtFA/XQgIMiKbfsPkJPznTQQM1Qd35gZiW/SegLCX9nCwxs0sRNjMNXGl6YvhTAStv0J26uuMmxwM/yAeDyVNDQZ0rekqbBXpj1dKhDK8b0xBnMZAuWOEfWrS5rIafK/KCZw3GSIhQltxkurCAEUdMueuNGvRDi7FlcJacn4A74RBc8uEXIqo7DwVvkRrGjr322QjgbhbfC4c9e6T5QwTBV1fcKrfsBMcteg/1F2MTaaFusgql28KMdd4bpcyiy3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1935f7ca-a8b1-46af-848c-6af6568bcd7c", "record_id": "flaws_cloudtrail:0000469:1935f7ca-a8b1-46af-848c-6af6568bcd7c", "row_index": 469, "timestamp": "2017-05-27T03:14:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1935f7ca-a8b1-46af-848c-6af6568bcd7c", "eventTime": "2017-05-27T03:14:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA52P0N120B455L147", "expiration": "May 27, 2017 4:14:59 AM", "sessionToken": "FQoDYXdzECQaDGLNBQ7faGiRkVwgCyLMAZH2k498wLWG/2FmaDTeODmoCS14vqyPOJFsFzyv/Ujm/OsvzPZJwOxfI1Omtc5u9Pl7FK7yE3d5PT05iORASCW6CmTGziGVzZxZ6i0GSRXC6u5OC1DUspmpksb2yZq7vIlsINxUrG4qbB8ZJ5Mv11MpvORfZ9DHvjmc9lTm2I83RwhPE/ZyU4XcUKLEWgz0A/PM4DpP1K4PZrxT6ORvzp2tC1N79SFSKkDSC3wv94p8X/MegN0gY0JNepE66rA5l2fmqwV/7uRs7x/I1Siz3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e22493-68a4-4b45-a338-45714cb269", "record_id": "flaws_cloudtrail:0000470:8e22493-68a4-4b45-a338-45714cb269", "row_index": 470, "timestamp": "2017-05-27T03:14:59Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6XLPVDDHRSDFXBSV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e22493-68a4-4b45-a338-45714cb269", "eventTime": "2017-05-27T03:14:59Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6XLPVDDHRSDFXBSV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ca9afa3-8a67-4833-9be8-02d093a217468", "record_id": "flaws_cloudtrail:0000471:3ca9afa3-8a67-4833-9be8-02d093a217468", "row_index": 471, "timestamp": "2017-05-27T03:15:00Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA52P0N120B455L147", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ca9afa3-8a67-4833-9be8-02d093a217468", "eventTime": "2017-05-27T03:15:00Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA52P0N120B455L147", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:14:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87268a96-921d-48f1-b962-3e389ebc7be4", "record_id": "flaws_cloudtrail:0000472:87268a96-921d-48f1-b962-3e389ebc7be4", "row_index": 472, "timestamp": "2017-05-27T03:15:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87268a96-921d-48f1-b962-3e389ebc7be4", "eventTime": "2017-05-27T03:15:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZQXEWA8E9C5RHTFF", "expiration": "May 27, 2017 4:15:01 AM", "sessionToken": "FQoDYXdzECQaDEqBRm/2QquB414vqiLMAabpVz+cFjDRDdOQMF4dr9PhXPzguDMMZg72gX6IEBmrBB2SNyX6JuXykHm03xfcFS2W+ZqZKfimRySpe76Ha4ZmL8TLleH8e7zDhRMEPCzrwZvZpXI7LP6b8XH3oQiDPXM/aZHnmSXYOjHbJbCT+gi5JrpHEyUiLNfgXfns70JizVQq+QvZisR8AGkNUy/N8LdCLt1y5GodK3ucupA5BXcJ9EcjaUw7Dehs8PBAE8LNXLMNkzGAcJE1gAKSWFNQgeXPACGtVHpZbKLTTSi13qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3ec4f00-6bfb-4f84-8a8e-69532d9ae360", "record_id": "flaws_cloudtrail:0000473:c3ec4f00-6bfb-4f84-8a8e-69532d9ae360", "row_index": 473, "timestamp": "2017-05-27T03:15:02Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZQXEWA8E9C5RHTFF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3ec4f00-6bfb-4f84-8a8e-69532d9ae360", "eventTime": "2017-05-27T03:15:02Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZQXEWA8E9C5RHTFF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3b7e0b-972c-4782-aae5-a6157e2241d2", "record_id": "flaws_cloudtrail:0000474:6d3b7e0b-972c-4782-aae5-a6157e2241d2", "row_index": 474, "timestamp": "2017-05-27T03:15:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3b7e0b-972c-4782-aae5-a6157e2241d2", "eventTime": "2017-05-27T03:15:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA59JXJ8571UJD383E", "expiration": "May 27, 2017 4:15:02 AM", "sessionToken": "FQoDYXdzECQaDKiI4yhvFF4KUFbT1CLMAU21Oyqzkjwg1H/I5CEFv0euemCViAquxCVq+iiMMp3KeMiRuFdd/nrOCbxp6ijYarNpLreWkxcC9rfKKjIRnkDzTVEAaycx1uj0UanhwlvenvitgntZbjsz0LpTktfIw5mrBMektIqeQuHqsUD9Uw1yrW18/E1x7q6VizNkjhgEbK19TC5iKqO3ll0RmSqW38OAOyeTwsCIgZ87V8eNgKZgnBgKUAfzwmps44RL0QfrEET18DiZ8lSTd+4N3GTlB0ytXcTb/y9B6UeNdyi23qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e52286c7-a5ab-42f7-89c4-1785b641461c", "record_id": "flaws_cloudtrail:0000475:e52286c7-a5ab-42f7-89c4-1785b641461c", "row_index": 475, "timestamp": "2017-05-27T03:15:02Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 589, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e52286c7-a5ab-42f7-89c4-1785b641461c", "eventTime": "2017-05-27T03:15:02Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f48ec6f5-a933-4a38-ab86-c6c1c51ed152", "record_id": "flaws_cloudtrail:0000476:f48ec6f5-a933-4a38-ab86-c6c1c51ed152", "row_index": 476, "timestamp": "2017-05-27T03:15:03Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA59JXJ8571UJD383E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f48ec6f5-a933-4a38-ab86-c6c1c51ed152", "eventTime": "2017-05-27T03:15:03Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA59JXJ8571UJD383E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87a167a-2145-44fd-92d6-082169bca30", "record_id": "flaws_cloudtrail:0000477:c87a167a-2145-44fd-92d6-082169bca30", "row_index": 477, "timestamp": "2017-05-27T03:15:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87a167a-2145-44fd-92d6-082169bca30", "eventTime": "2017-05-27T03:15:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADTBJD4S937L6TKXS", "expiration": "May 27, 2017 4:15:03 AM", "sessionToken": "FQoDYXdzECQaDGFkQvjSPunYLkwA4SLMAVrVKHgG/mc3lJDGEQ1lfCRwe5D79yTWU/z7r/H89NJSTVFZPFXl2AvAhneT0r+9lMkkX1uQuw8yIytNZOhD9VeyDP6YvyrSAEg4ksSZ6wlEGbtKXw/H/jQ+/hPIF01SGDZ1uRf9K28thGMBKAhD8gNo/AvL2D5qbgZAOf1M1xN7/gIICvxvnSKrOTK/3C4jfDz1fS9kF79v2IrXljlXwoN0u+z89PWULx0cb9lML7LcOtuENBFg9zgMCecMna77UC8v6uUk6fHs2xIIQyi33qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb33fc1d-6624-4840-98b8-7f1f43e6b7c4", "record_id": "flaws_cloudtrail:0000478:bb33fc1d-6624-4840-98b8-7f1f43e6b7c4", "row_index": 478, "timestamp": "2017-05-27T03:15:04Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADTBJD4S937L6TKXS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb33fc1d-6624-4840-98b8-7f1f43e6b7c4", "eventTime": "2017-05-27T03:15:04Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADTBJD4S937L6TKXS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3597fd22-7be9-4d02-8a0a-a006da23d01b", "record_id": "flaws_cloudtrail:0000479:3597fd22-7be9-4d02-8a0a-a006da23d01b", "row_index": 479, "timestamp": "2017-05-27T03:15:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3597fd22-7be9-4d02-8a0a-a006da23d01b", "eventTime": "2017-05-27T03:15:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8RD350OG4OV4B4ZE", "expiration": "May 27, 2017 4:15:04 AM", "sessionToken": "FQoDYXdzECQaDA5Q2fJyWBMNFT47cCLMAbSQmL6pAX2nAhQ0J/tDP97DrMDciLKBLoSlrlcz8ZlrUyLwtgBs/UMY73/WJiwQMnayUqq7BrFU4mJz+bWrNbL9dVrRBPj6Rugc3PhlMq3a6HlIyR7KD410XNgySf8Q2p5fD+CthlhdZVVA+dD+hiv/HW1FJeIdbtG7CCvastcHJakjstjcfCzhXvBKzeWoHamyJFSGwHl6mTiwdT67HVySsk1+2f54jhYUlG/gxstjTwgXMD3jUM46Gq3aORDaeLuBOPA6kdRQ7uZLoii43qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edb5dca7-0547-4fb2-a18f-22a28c2f01e1", "record_id": "flaws_cloudtrail:0000480:edb5dca7-0547-4fb2-a18f-22a28c2f01e1", "row_index": 480, "timestamp": "2017-05-27T03:15:05Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8RD350OG4OV4B4ZE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edb5dca7-0547-4fb2-a18f-22a28c2f01e1", "eventTime": "2017-05-27T03:15:05Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8RD350OG4OV4B4ZE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e0490d-a602-445d-9d50-d341365b2b286", "record_id": "flaws_cloudtrail:0000481:f6e0490d-a602-445d-9d50-d341365b2b286", "row_index": 481, "timestamp": "2017-05-27T03:15:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e0490d-a602-445d-9d50-d341365b2b286", "eventTime": "2017-05-27T03:15:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFZTLJU50BU922L5O", "expiration": "May 27, 2017 4:15:06 AM", "sessionToken": "FQoDYXdzECQaDGkeRrd+Ya7YPNFojyLMAevxTTBmDaylBHDdkImi1YX9qfdSv5LrZC6zOxKngpRXhj8GHvjOS18KGoRByeSeqc6VdPh8E7dMrAKZDI5X54vuWe2Cpzup8eBbV0Una9p2jrv0LI1NnVmtciOOgKVoQ0BvTJ99UBhoV9JXCimhTFIJdGwkY5V7eaZbC8wudkAJAXJqSJaBRy7uuezSCIIyr498zZqKXQNEbjGSmWAgfzY1WOzuoNXTDLMs4s9PYwNL+Igu+p3CPWtLqE4kpugvnNfUNFz65R05bYw8SCi63qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0955de10-ebe1-449c-8973-247fcecc6980", "record_id": "flaws_cloudtrail:0000482:0955de10-ebe1-449c-8973-247fcecc6980", "row_index": 482, "timestamp": "2017-05-27T03:15:07Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFZTLJU50BU922L5O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0955de10-ebe1-449c-8973-247fcecc6980", "eventTime": "2017-05-27T03:15:07Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFZTLJU50BU922L5O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ed5a74a-7740-4914-b42a-29c3e6aca624", "record_id": "flaws_cloudtrail:0000483:8ed5a74a-7740-4914-b42a-29c3e6aca624", "row_index": 483, "timestamp": "2017-05-27T03:15:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ed5a74a-7740-4914-b42a-29c3e6aca624", "eventTime": "2017-05-27T03:15:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5SVCG2T64CCH9NRU", "expiration": "May 27, 2017 4:15:07 AM", "sessionToken": "FQoDYXdzECQaDIZ7L4ctB5mL45i82SLMAf/AMZAvN5s+kY3LQKDBIf96R8fIywT+ENhhmNKvj5mN0FBz7qWJcUim8h6QCDE72eV/YIHjp5WSYSxHcvLJVn4F8Yfr+5wFu9w0cQEN5Qp1qfzgC9wmrVMzivtyjX3vRXwUAu0fYIqHVf4opU87touauohd5XpmqsWuovQ772RwMaqmT/jyulOtgh/W+ZZHJpj8B20SgR5Te9BRYGjzEcuQk7HnF7OXJiegK3C1u9KNICCji7PT+QKtQ10PRxRakvO3oblW/s7Az/DLWyi73qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d73a3c92-6dd2-4d85-8808-810d7a8f3139", "record_id": "flaws_cloudtrail:0000484:d73a3c92-6dd2-4d85-8808-810d7a8f3139", "row_index": 484, "timestamp": "2017-05-27T03:15:08Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5SVCG2T64CCH9NRU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d73a3c92-6dd2-4d85-8808-810d7a8f3139", "eventTime": "2017-05-27T03:15:08Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5SVCG2T64CCH9NRU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70a370b-fce8-4104-b574-a33ed701dee4", "record_id": "flaws_cloudtrail:0000485:c70a370b-fce8-4104-b574-a33ed701dee4", "row_index": 485, "timestamp": "2017-05-27T03:15:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70a370b-fce8-4104-b574-a33ed701dee4", "eventTime": "2017-05-27T03:15:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1YRV9XBZVZLJJTP6", "expiration": "May 27, 2017 4:15:08 AM", "sessionToken": "FQoDYXdzECQaDEbtwAah/uTtq9h4jyLMAas32rJ7114ci5yk9CoKpK+zJd7Z5epFYHCZ2KNyGpRHioXVGJ/E6xPxK2y6kqylcSCE6wBFAOt50fTTqJG5PBadx8MhhO8i+xCw3DLRRVquWS/Q5Rjkpq7z+yll/SK24kl7DWPSUNIacgeJk/jNOUL0ETIzA8pmFe3Vj4N9KFisroIeGQ9jhCuz8trffDTVOF251+7ICASHwshKLd5+qmFQvQfF3xoRfW+ZJ1yrAd9i4FworAqfGsETtoV4laQPDJ2yfOgg7QnXY28JIyi83qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad8801d7-35ef-46c7-a9c1-da5a3bb9e572", "record_id": "flaws_cloudtrail:0000486:ad8801d7-35ef-46c7-a9c1-da5a3bb9e572", "row_index": 486, "timestamp": "2017-05-27T03:15:09Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1YRV9XBZVZLJJTP6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad8801d7-35ef-46c7-a9c1-da5a3bb9e572", "eventTime": "2017-05-27T03:15:09Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1YRV9XBZVZLJJTP6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966a3485-9925-4ec4-9fad-ca96b4e77563", "record_id": "flaws_cloudtrail:0000487:966a3485-9925-4ec4-9fad-ca96b4e77563", "row_index": 487, "timestamp": "2017-05-27T03:15:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966a3485-9925-4ec4-9fad-ca96b4e77563", "eventTime": "2017-05-27T03:15:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASUPREAFSMWI0JIEF", "expiration": "May 27, 2017 4:15:10 AM", "sessionToken": "FQoDYXdzECQaDEFmgkNgdSZ7gZ+qISLMAX1dSOv/Z5AVGM0LlL1giTUrJ7jrniohd+NGrcHMe4tsIzfA+hztMArWYvQr+lhqS3tnbHbfYNiH7hIFbUbtfK0YHcV+ExIav40WouOANGEbwIfVDcF1+abj0/kLmhfyfl8PDo7kanQaatl7iPfXOheF2q50YWDR57BtXacJ7+7if5+ziAAhbutsQQIYqI4kyKq2HAOCQOEtr3khAqXs7wGankm6kErzFZmVLmvPcHSNQiudG3zGxD0oyIV3vUnTjZfdIXPQGqYVAVLr7Si+3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e9d46e-76a0-4e02-9d4a-fb5135c1f787", "record_id": "flaws_cloudtrail:0000488:f9e9d46e-76a0-4e02-9d4a-fb5135c1f787", "row_index": 488, "timestamp": "2017-05-27T03:15:11Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASUPREAFSMWI0JIEF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e9d46e-76a0-4e02-9d4a-fb5135c1f787", "eventTime": "2017-05-27T03:15:11Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASUPREAFSMWI0JIEF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8de095ae-bbf0-405d-803d-cd78a2471416", "record_id": "flaws_cloudtrail:0000489:8de095ae-bbf0-405d-803d-cd78a2471416", "row_index": 489, "timestamp": "2017-05-27T03:15:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8de095ae-bbf0-405d-803d-cd78a2471416", "eventTime": "2017-05-27T03:15:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOT5KRXN87ZFQPPAD", "expiration": "May 27, 2017 4:15:11 AM", "sessionToken": "FQoDYXdzECQaDM+6WjyMAssT95/nGCLMAXty1AWcYarREomfYrHYbuQMFU8tP3Hn0+kdoZ/a0Uw1FpXT5Km8+x2Py8V9rEKY5kiLDhzKjcfhxB6WxqP46p1sHzhgDP9h/vi0P2o6ZybwtlaFNPLhZcxpwQr1ENh9hOtULPzHl6BPRR1fdctk/Qebkg2EoOo6bCPQUgnu9Ekrqu/0sMrfIt04CEmVA6wklXdBU1vNngbWkmHbBGZLmdT9+5NWlrSJxlj+Rc/gcoYdVmeHSPKq3rWlo+khe2tBtvS9JFQT6qCkwWAacSi/3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60d9eef0-2981-4f9b-a174-e66911e7", "record_id": "flaws_cloudtrail:0000490:60d9eef0-2981-4f9b-a174-e66911e7", "row_index": 490, "timestamp": "2017-05-27T03:15:12Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAOT5KRXN87ZFQPPAD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60d9eef0-2981-4f9b-a174-e66911e7", "eventTime": "2017-05-27T03:15:12Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAOT5KRXN87ZFQPPAD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d27a172-5472-438e-9730-cb38726c59b", "record_id": "flaws_cloudtrail:0000491:8d27a172-5472-438e-9730-cb38726c59b", "row_index": 491, "timestamp": "2017-05-27T03:15:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d27a172-5472-438e-9730-cb38726c59b", "eventTime": "2017-05-27T03:15:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALIMBX0INIJ1D17PY", "expiration": "May 27, 2017 4:15:12 AM", "sessionToken": "FQoDYXdzECQaDG1dUtDnVVSdL+Ge/CLMAWe5+pcrYcP9Ag4cXYF3mgdSCSYZWuUVjohfF8q3aEBkdDxhHVZG1jLoDlr4Aptcat0zXV1z8PwLEtD0q0UBL/f1Pii6aFIYAprJsGKoCkoPu/PGPGqU6oLoT/iCzQvqd07XJ1+4v9wkbQTPNyoWeghzU7cVBKUZ5f2UC+jOLFpAofw4KV2oNFGNisvY7pORZKOOgGCmiuIkBF49WZOyLHP06CwtP14wHIhQrYvU93lUnSRuFZUJ9Hujs8Dh4Jl8Un6Wjqt/Li7mVc9nGijA3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7cd8b73-8ebe-46fe-9aab-c7b983aeaeb3", "record_id": "flaws_cloudtrail:0000492:b7cd8b73-8ebe-46fe-9aab-c7b983aeaeb3", "row_index": 492, "timestamp": "2017-05-27T03:15:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7cd8b73-8ebe-46fe-9aab-c7b983aeaeb3", "eventTime": "2017-05-27T03:15:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2J8QYDDSGKH3M2FY", "expiration": "May 27, 2017 4:15:13 AM", "sessionToken": "FQoDYXdzECQaDEhjzHt62W56g10KziLMAVA/Mp+RB2f9+bZ0ge3raZz3wuiJnleFLyO/WIMl8K0At6te+tHsQMQrajYpMHfibWDlwyYKoLGFtEqx4J+gp3f6mZ3p7gepyf8rhgGCMd5v/JYj4NDYEYzgxFmz2o5nGT2eD1zScEkr8B9DzXskNpENyDE0k6yRLD7nXzciDKJd2cz0kgmpDVQbHxGcdCkkVGeX8W/TTe0jBYpKTtOngKrkSJK7YGZiPogqagRDqmyLjVXq2hHzWAaRS5Qfb1FN/K8utWsE2sRH2E3C+ijB3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff6ee7f-c07c-4d7f-9cb5-5f5c8221a6c4", "record_id": "flaws_cloudtrail:0000493:8ff6ee7f-c07c-4d7f-9cb5-5f5c8221a6c4", "row_index": 493, "timestamp": "2017-05-27T03:15:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALIMBX0INIJ1D17PY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff6ee7f-c07c-4d7f-9cb5-5f5c8221a6c4", "eventTime": "2017-05-27T03:15:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALIMBX0INIJ1D17PY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d914aeeb-801c-4296-99b8-87e36e5581de", "record_id": "flaws_cloudtrail:0000494:d914aeeb-801c-4296-99b8-87e36e5581de", "row_index": 494, "timestamp": "2017-05-27T03:15:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d914aeeb-801c-4296-99b8-87e36e5581de", "eventTime": "2017-05-27T03:15:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA538BMX6GGTYE63YY", "expiration": "May 27, 2017 4:15:14 AM", "sessionToken": "FQoDYXdzECQaDJyN0+1jxrhOWL5POCLMAWgVkq6gVxwBlO1vslkQuFqZOYLvhT0kqbyOsoue62LBWurNAzNC2wkBiT0YO3p2jEmFbyaUejEAeIoxkoFoIhaGH//RIHFQzSDWX6NXH6BEWbsBrtm+rA69/J7AfSUWl1SLiYd2cdaRr2VGWdH2EwCh018swk+dDrkyRJ3WlqVupCvXr5tFvO0K/52jZAuTKmz0+hhXbhaZmTAkgtPvYJCxfhGKSmzgkZ7/YnhomPjtvP5B6vaWiXWfmK1IaJaAtdg1i5F+1rbMMjImqCjC3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615491e33-94e9-4a25-a5c4-6b22787c0", "record_id": "flaws_cloudtrail:0000495:615491e33-94e9-4a25-a5c4-6b22787c0", "row_index": 495, "timestamp": "2017-05-27T03:15:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2J8QYDDSGKH3M2FY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615491e33-94e9-4a25-a5c4-6b22787c0", "eventTime": "2017-05-27T03:15:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2J8QYDDSGKH3M2FY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43ad1dfe-b489-4c40-a032-76a6f0ff4d4b", "record_id": "flaws_cloudtrail:0000496:43ad1dfe-b489-4c40-a032-76a6f0ff4d4b", "row_index": 496, "timestamp": "2017-05-27T03:15:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA538BMX6GGTYE63YY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43ad1dfe-b489-4c40-a032-76a6f0ff4d4b", "eventTime": "2017-05-27T03:15:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA538BMX6GGTYE63YY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e377281-669c-4b90-ae51-5ef11156ec2", "record_id": "flaws_cloudtrail:0000497:0e377281-669c-4b90-ae51-5ef11156ec2", "row_index": 497, "timestamp": "2017-05-27T03:15:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e377281-669c-4b90-ae51-5ef11156ec2", "eventTime": "2017-05-27T03:15:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33df379-07e4-4b72-96f6-488536b4ca47", "record_id": "flaws_cloudtrail:0000498:d33df379-07e4-4b72-96f6-488536b4ca47", "row_index": 498, "timestamp": "2017-05-27T03:15:15Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33df379-07e4-4b72-96f6-488536b4ca47", "eventTime": "2017-05-27T03:15:15Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2ea8628-625d-4f8a-882e-a49be21e6ca4", "record_id": "flaws_cloudtrail:0000499:b2ea8628-625d-4f8a-882e-a49be21e6ca4", "row_index": 499, "timestamp": "2017-05-27T03:15:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2ea8628-625d-4f8a-882e-a49be21e6ca4", "eventTime": "2017-05-27T03:15:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACHT868GH35U7FO79", "expiration": "May 27, 2017 4:15:15 AM", "sessionToken": "FQoDYXdzECQaDEZlIiMJA+0LE0RNyyLMATQk1Se8a4h8PHsdkOO5qDqosY2twwR3q6qQMt6DSovUbjBdrMjrfsOyMVo5wgDZvH98AZ5la83Ix/zyy8pbavJNVPE+2zrZUT3p5nePtISOAbWC3zSlSINYxeeNpB0tscvvqIsEhiaTceno33s9GVCRyZtqK0K1Z0JlfmkNJ/0y/Yk61iu/2hEyW1M0WXROlGzgT1F/ROaVH8PjWDNf8v5sSaWfJYQ7d23AQo3Vp+IIFyNAcpuzaD4lBVMvPsnUjPgrKwj1YrUShFEcuSjD3qPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991960-f303-41d5-9d5a-be718c4da2d2", "record_id": "flaws_cloudtrail:0000500:991960-f303-41d5-9d5a-be718c4da2d2", "row_index": 500, "timestamp": "2017-05-27T03:15:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACHT868GH35U7FO79", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991960-f303-41d5-9d5a-be718c4da2d2", "eventTime": "2017-05-27T03:15:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACHT868GH35U7FO79", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:15:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9761e985-9f65-4e4f-9a8b-df50f572671c", "record_id": "flaws_cloudtrail:0000501:9761e985-9f65-4e4f-9a8b-df50f572671c", "row_index": 501, "timestamp": "2017-05-27T03:15:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9761e985-9f65-4e4f-9a8b-df50f572671c", "eventTime": "2017-05-27T03:15:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ad16127-e604-4374-b467-8cff1e16921", "record_id": "flaws_cloudtrail:0000502:3ad16127-e604-4374-b467-8cff1e16921", "row_index": 502, "timestamp": "2017-05-27T03:15:16Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ad16127-e604-4374-b467-8cff1e16921", "eventTime": "2017-05-27T03:15:16Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af61be35-3ac0-48c2-878a-da019af30776", "record_id": "flaws_cloudtrail:0000503:af61be35-3ac0-48c2-878a-da019af30776", "row_index": 503, "timestamp": "2017-05-27T03:15:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af61be35-3ac0-48c2-878a-da019af30776", "eventTime": "2017-05-27T03:15:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "561ef66c-e2a9-46f1-94df-25fa0f666904", "record_id": "flaws_cloudtrail:0000504:561ef66c-e2a9-46f1-94df-25fa0f666904", "row_index": 504, "timestamp": "2017-05-27T03:15:16Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "561ef66c-e2a9-46f1-94df-25fa0f666904", "eventTime": "2017-05-27T03:15:16Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a56ae8-7424-4391-b347-8fe73863e", "record_id": "flaws_cloudtrail:0000505:a1a56ae8-7424-4391-b347-8fe73863e", "row_index": 505, "timestamp": "2017-05-27T03:15:16Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a56ae8-7424-4391-b347-8fe73863e", "eventTime": "2017-05-27T03:15:16Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c42f1cf-f7b7-47d5-a72f-1af2e497e9bf", "record_id": "flaws_cloudtrail:0000506:6c42f1cf-f7b7-47d5-a72f-1af2e497e9bf", "row_index": 506, "timestamp": "2017-05-27T03:15:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c42f1cf-f7b7-47d5-a72f-1af2e497e9bf", "eventTime": "2017-05-27T03:15:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b70a1f89-bf84-448f-8bc8-5c835113f64f", "record_id": "flaws_cloudtrail:0000507:b70a1f89-bf84-448f-8bc8-5c835113f64f", "row_index": 507, "timestamp": "2017-05-27T03:15:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b70a1f89-bf84-448f-8bc8-5c835113f64f", "eventTime": "2017-05-27T03:15:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "368bdfa7-1d25-4b30-9dc4-06c8a153f89d", "record_id": "flaws_cloudtrail:0000508:368bdfa7-1d25-4b30-9dc4-06c8a153f89d", "row_index": 508, "timestamp": "2017-05-27T03:15:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "368bdfa7-1d25-4b30-9dc4-06c8a153f89d", "eventTime": "2017-05-27T03:15:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff2de87-8a4f-4c03-a672-1009a31849", "record_id": "flaws_cloudtrail:0000509:bff2de87-8a4f-4c03-a672-1009a31849", "row_index": 509, "timestamp": "2017-05-27T03:15:19Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff2de87-8a4f-4c03-a672-1009a31849", "eventTime": "2017-05-27T03:15:19Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "256901ed8-fb5b-47bc-8ad5-dcc22e7d4a92", "record_id": "flaws_cloudtrail:0000510:256901ed8-fb5b-47bc-8ad5-dcc22e7d4a92", "row_index": 510, "timestamp": "2017-05-27T03:15:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "256901ed8-fb5b-47bc-8ad5-dcc22e7d4a92", "eventTime": "2017-05-27T03:15:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "037554a41-0123-496b-9c7d-1fe731e1b855", "record_id": "flaws_cloudtrail:0000511:037554a41-0123-496b-9c7d-1fe731e1b855", "row_index": 511, "timestamp": "2017-05-27T03:15:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "037554a41-0123-496b-9c7d-1fe731e1b855", "eventTime": "2017-05-27T03:15:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383014c34-58b4-40bb-9c7e-5be497e090fc", "record_id": "flaws_cloudtrail:0000512:383014c34-58b4-40bb-9c7e-5be497e090fc", "row_index": 512, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383014c34-58b4-40bb-9c7e-5be497e090fc", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c08dadc8-19d8-4b45-9eb3-be50ebf5ae19", "record_id": "flaws_cloudtrail:0000513:c08dadc8-19d8-4b45-9eb3-be50ebf5ae19", "row_index": 513, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c08dadc8-19d8-4b45-9eb3-be50ebf5ae19", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346bb70d-5c70-4ef0-ad74-fce9272f252b", "record_id": "flaws_cloudtrail:0000514:346bb70d-5c70-4ef0-ad74-fce9272f252b", "row_index": 514, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346bb70d-5c70-4ef0-ad74-fce9272f252b", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e17c0287-2382-4166-83e4-6c90eb2732ef", "record_id": "flaws_cloudtrail:0000515:e17c0287-2382-4166-83e4-6c90eb2732ef", "row_index": 515, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e17c0287-2382-4166-83e4-6c90eb2732ef", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236694f1-6fde-47d9-8dd3-eebaeac9fca8", "record_id": "flaws_cloudtrail:0000516:236694f1-6fde-47d9-8dd3-eebaeac9fca8", "row_index": 516, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236694f1-6fde-47d9-8dd3-eebaeac9fca8", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4cf6047-6101-4ad6-b565-103a27cb46dd", "record_id": "flaws_cloudtrail:0000517:a4cf6047-6101-4ad6-b565-103a27cb46dd", "row_index": 517, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4cf6047-6101-4ad6-b565-103a27cb46dd", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892314-de9b-4a98-8c59-5d4aa62c404d", "record_id": "flaws_cloudtrail:0000518:892314-de9b-4a98-8c59-5d4aa62c404d", "row_index": 518, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892314-de9b-4a98-8c59-5d4aa62c404d", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1be24c5-344e-4f25-8eee-0ff146a414f4", "record_id": "flaws_cloudtrail:0000519:f1be24c5-344e-4f25-8eee-0ff146a414f4", "row_index": 519, "timestamp": "2017-05-27T03:15:20Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1be24c5-344e-4f25-8eee-0ff146a414f4", "eventTime": "2017-05-27T03:15:20Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3386e2c-19cf-4d6a-9670-c87d118913f", "record_id": "flaws_cloudtrail:0000520:a3386e2c-19cf-4d6a-9670-c87d118913f", "row_index": 520, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3386e2c-19cf-4d6a-9670-c87d118913f", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80dd6227-a59a-4abe-bff5-5c56bd7e2ffc", "record_id": "flaws_cloudtrail:0000521:80dd6227-a59a-4abe-bff5-5c56bd7e2ffc", "row_index": 521, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80dd6227-a59a-4abe-bff5-5c56bd7e2ffc", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9beb0c33-16fe-4228-86c2-014dbc7cc97d", "record_id": "flaws_cloudtrail:0000522:9beb0c33-16fe-4228-86c2-014dbc7cc97d", "row_index": 522, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9beb0c33-16fe-4228-86c2-014dbc7cc97d", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a571f92-e2e2-46c2-a612-f1c22491d78", "record_id": "flaws_cloudtrail:0000523:4a571f92-e2e2-46c2-a612-f1c22491d78", "row_index": 523, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a571f92-e2e2-46c2-a612-f1c22491d78", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74ea69d-80b7-491a-bc7b-131cd483900d", "record_id": "flaws_cloudtrail:0000524:b74ea69d-80b7-491a-bc7b-131cd483900d", "row_index": 524, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74ea69d-80b7-491a-bc7b-131cd483900d", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "015eff39-e6fa-4d63-b66f-4c904bf5d2f7", "record_id": "flaws_cloudtrail:0000525:015eff39-e6fa-4d63-b66f-4c904bf5d2f7", "row_index": 525, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "015eff39-e6fa-4d63-b66f-4c904bf5d2f7", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "804761f5e-e6b1-4004-933a-7d2c59e4a0cc", "record_id": "flaws_cloudtrail:0000526:804761f5e-e6b1-4004-933a-7d2c59e4a0cc", "row_index": 526, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "804761f5e-e6b1-4004-933a-7d2c59e4a0cc", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa95162b-ff1e-4ab5-bf9b-bc13639736e3", "record_id": "flaws_cloudtrail:0000527:fa95162b-ff1e-4ab5-bf9b-bc13639736e3", "row_index": 527, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa95162b-ff1e-4ab5-bf9b-bc13639736e3", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78fe58a2-0542-4826-9959-6abc35dfd498", "record_id": "flaws_cloudtrail:0000528:78fe58a2-0542-4826-9959-6abc35dfd498", "row_index": 528, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78fe58a2-0542-4826-9959-6abc35dfd498", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010d72f4-9afd-456a-9ce1-8475e5caa789", "record_id": "flaws_cloudtrail:0000529:010d72f4-9afd-456a-9ce1-8475e5caa789", "row_index": 529, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010d72f4-9afd-456a-9ce1-8475e5caa789", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a6cf1d-e088-45b8-b9c8-c0e0316c8990", "record_id": "flaws_cloudtrail:0000530:d4a6cf1d-e088-45b8-b9c8-c0e0316c8990", "row_index": 530, "timestamp": "2017-05-27T03:15:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a6cf1d-e088-45b8-b9c8-c0e0316c8990", "eventTime": "2017-05-27T03:15:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53cbf004-7738-40f0-9a98-75cef2194a10", "record_id": "flaws_cloudtrail:0000531:53cbf004-7738-40f0-9a98-75cef2194a10", "row_index": 531, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53cbf004-7738-40f0-9a98-75cef2194a10", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6568a647-5822-443d-8e31-12e5ce359757", "record_id": "flaws_cloudtrail:0000532:6568a647-5822-443d-8e31-12e5ce359757", "row_index": 532, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6568a647-5822-443d-8e31-12e5ce359757", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de9b019c-f40a-4a66-b5d9-083c739fa227", "record_id": "flaws_cloudtrail:0000533:de9b019c-f40a-4a66-b5d9-083c739fa227", "row_index": 533, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de9b019c-f40a-4a66-b5d9-083c739fa227", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78d6e5a6-455c-4fe8-bf42-727066b12d0", "record_id": "flaws_cloudtrail:0000534:78d6e5a6-455c-4fe8-bf42-727066b12d0", "row_index": 534, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78d6e5a6-455c-4fe8-bf42-727066b12d0", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951db6a1-cfb7-4722-9700-0d96d3fc3077", "record_id": "flaws_cloudtrail:0000535:951db6a1-cfb7-4722-9700-0d96d3fc3077", "row_index": 535, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951db6a1-cfb7-4722-9700-0d96d3fc3077", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b022d0c2-f2cf-4e07-a2f7-239dbc249de1", "record_id": "flaws_cloudtrail:0000536:b022d0c2-f2cf-4e07-a2f7-239dbc249de1", "row_index": 536, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b022d0c2-f2cf-4e07-a2f7-239dbc249de1", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f643ca-7ef4-4299-bcb9-1e5fac39adbd", "record_id": "flaws_cloudtrail:0000537:00f643ca-7ef4-4299-bcb9-1e5fac39adbd", "row_index": 537, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f643ca-7ef4-4299-bcb9-1e5fac39adbd", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "370b1c12-de27-4e91-868a-a589cddafcb3", "record_id": "flaws_cloudtrail:0000538:370b1c12-de27-4e91-868a-a589cddafcb3", "row_index": 538, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "370b1c12-de27-4e91-868a-a589cddafcb3", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59db522a-8724-4990-a7f7-8632bac6254c", "record_id": "flaws_cloudtrail:0000539:59db522a-8724-4990-a7f7-8632bac6254c", "row_index": 539, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59db522a-8724-4990-a7f7-8632bac6254c", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef124d3c-f0bb-4fbe-99df-5b4ff1e9a856", "record_id": "flaws_cloudtrail:0000540:ef124d3c-f0bb-4fbe-99df-5b4ff1e9a856", "row_index": 540, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef124d3c-f0bb-4fbe-99df-5b4ff1e9a856", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf09f45-1fbb-44a3-b5b3-a1c6c159aa71", "record_id": "flaws_cloudtrail:0000541:1cf09f45-1fbb-44a3-b5b3-a1c6c159aa71", "row_index": 541, "timestamp": "2017-05-27T03:15:22Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf09f45-1fbb-44a3-b5b3-a1c6c159aa71", "eventTime": "2017-05-27T03:15:22Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c778d6ff-cbe8-4c87-a7e6-73a67217c1", "record_id": "flaws_cloudtrail:0000542:c778d6ff-cbe8-4c87-a7e6-73a67217c1", "row_index": 542, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c778d6ff-cbe8-4c87-a7e6-73a67217c1", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1252f71a-f316-401f-bcac-4c776f0ff9ef", "record_id": "flaws_cloudtrail:0000543:1252f71a-f316-401f-bcac-4c776f0ff9ef", "row_index": 543, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1252f71a-f316-401f-bcac-4c776f0ff9ef", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0bc9f86-d1ad-4a36-8889-1651c9fab7dc", "record_id": "flaws_cloudtrail:0000544:d0bc9f86-d1ad-4a36-8889-1651c9fab7dc", "row_index": 544, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0bc9f86-d1ad-4a36-8889-1651c9fab7dc", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f918285d2-844a-4628-abe9-da5c9b2a9333", "record_id": "flaws_cloudtrail:0000545:f918285d2-844a-4628-abe9-da5c9b2a9333", "row_index": 545, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f918285d2-844a-4628-abe9-da5c9b2a9333", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "501d095a-2f7d-46bd-b8a2-ada5bfcdde73", "record_id": "flaws_cloudtrail:0000546:501d095a-2f7d-46bd-b8a2-ada5bfcdde73", "row_index": 546, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "501d095a-2f7d-46bd-b8a2-ada5bfcdde73", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcaccc8f-2cfe-4d1e-9885-3607b1d7350f", "record_id": "flaws_cloudtrail:0000547:fcaccc8f-2cfe-4d1e-9885-3607b1d7350f", "row_index": 547, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcaccc8f-2cfe-4d1e-9885-3607b1d7350f", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84736f73-45a3-409f-9810-a2bb90c7529e", "record_id": "flaws_cloudtrail:0000548:84736f73-45a3-409f-9810-a2bb90c7529e", "row_index": 548, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84736f73-45a3-409f-9810-a2bb90c7529e", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b8e24b-2f4d-490e-82d6-004ea30018fa", "record_id": "flaws_cloudtrail:0000549:70b8e24b-2f4d-490e-82d6-004ea30018fa", "row_index": 549, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b8e24b-2f4d-490e-82d6-004ea30018fa", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9a0ec91-6ae8-4ebe-85cb-d7eef36ae9e1", "record_id": "flaws_cloudtrail:0000550:a9a0ec91-6ae8-4ebe-85cb-d7eef36ae9e1", "row_index": 550, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9a0ec91-6ae8-4ebe-85cb-d7eef36ae9e1", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0718fb-1b38-405a-96b6-ae288e423ab7", "record_id": "flaws_cloudtrail:0000551:4e0718fb-1b38-405a-96b6-ae288e423ab7", "row_index": 551, "timestamp": "2017-05-27T03:15:23Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0718fb-1b38-405a-96b6-ae288e423ab7", "eventTime": "2017-05-27T03:15:23Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8f57c10-4bd3-4e3d-b592-cf1db79fecad", "record_id": "flaws_cloudtrail:0000552:c8f57c10-4bd3-4e3d-b592-cf1db79fecad", "row_index": 552, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8f57c10-4bd3-4e3d-b592-cf1db79fecad", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c8cb23f-4d22-4dd6-b488-e356492cdf2c", "record_id": "flaws_cloudtrail:0000553:0c8cb23f-4d22-4dd6-b488-e356492cdf2c", "row_index": 553, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c8cb23f-4d22-4dd6-b488-e356492cdf2c", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2fa698a-4636-4625-ae6e-39363b5cc8d2", "record_id": "flaws_cloudtrail:0000554:a2fa698a-4636-4625-ae6e-39363b5cc8d2", "row_index": 554, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2fa698a-4636-4625-ae6e-39363b5cc8d2", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f865926-ea9f-4c79-b479-a36baea9f9bf", "record_id": "flaws_cloudtrail:0000555:0f865926-ea9f-4c79-b479-a36baea9f9bf", "row_index": 555, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f865926-ea9f-4c79-b479-a36baea9f9bf", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d252ca5e-ce89-48d1-ab04-3f72e4918c4c", "record_id": "flaws_cloudtrail:0000556:d252ca5e-ce89-48d1-ab04-3f72e4918c4c", "row_index": 556, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1119, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d252ca5e-ce89-48d1-ab04-3f72e4918c4c", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d960912-f3e0-4c73-88c2-4a84c6c4a2df", "record_id": "flaws_cloudtrail:0000557:5d960912-f3e0-4c73-88c2-4a84c6c4a2df", "row_index": 557, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d960912-f3e0-4c73-88c2-4a84c6c4a2df", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fc09c0a-466f-4400-beec-bdcee7f162d9", "record_id": "flaws_cloudtrail:0000558:0fc09c0a-466f-4400-beec-bdcee7f162d9", "row_index": 558, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fc09c0a-466f-4400-beec-bdcee7f162d9", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad8106c3-fef9-49d7-8720-398a9c27b4e8", "record_id": "flaws_cloudtrail:0000559:ad8106c3-fef9-49d7-8720-398a9c27b4e8", "row_index": 559, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad8106c3-fef9-49d7-8720-398a9c27b4e8", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29326a03-d17d-497d-9803-7f68da852b78", "record_id": "flaws_cloudtrail:0000560:29326a03-d17d-497d-9803-7f68da852b78", "row_index": 560, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29326a03-d17d-497d-9803-7f68da852b78", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf6c9f92-c19e-4bbd-bc56-4c68f52a12eb", "record_id": "flaws_cloudtrail:0000561:cf6c9f92-c19e-4bbd-bc56-4c68f52a12eb", "row_index": 561, "timestamp": "2017-05-27T03:15:24Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf6c9f92-c19e-4bbd-bc56-4c68f52a12eb", "eventTime": "2017-05-27T03:15:24Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "952f59d9-0a05-460c-9391-be453ecbd57d", "record_id": "flaws_cloudtrail:0000562:952f59d9-0a05-460c-9391-be453ecbd57d", "row_index": 562, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "952f59d9-0a05-460c-9391-be453ecbd57d", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b0e9bf-bccb-452b-bf77-8ebfbfe7bbd2", "record_id": "flaws_cloudtrail:0000563:39b0e9bf-bccb-452b-bf77-8ebfbfe7bbd2", "row_index": 563, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b0e9bf-bccb-452b-bf77-8ebfbfe7bbd2", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "347812f7a-45b1-4ba6-9ef8-d37bbb6b64d2", "record_id": "flaws_cloudtrail:0000564:347812f7a-45b1-4ba6-9ef8-d37bbb6b64d2", "row_index": 564, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "347812f7a-45b1-4ba6-9ef8-d37bbb6b64d2", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "757b1c42-1704-45d2-a4f9-37467b59cb66", "record_id": "flaws_cloudtrail:0000565:757b1c42-1704-45d2-a4f9-37467b59cb66", "row_index": 565, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "757b1c42-1704-45d2-a4f9-37467b59cb66", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bfe6434-0954-4ca3-b598-41fb4f89f4e0", "record_id": "flaws_cloudtrail:0000566:5bfe6434-0954-4ca3-b598-41fb4f89f4e0", "row_index": 566, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bfe6434-0954-4ca3-b598-41fb4f89f4e0", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5320c179-adf9-4f2c-9f24-13332e889f08", "record_id": "flaws_cloudtrail:0000567:5320c179-adf9-4f2c-9f24-13332e889f08", "row_index": 567, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5320c179-adf9-4f2c-9f24-13332e889f08", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddb0715b-e3b9-4d35-bdb8-5f39c586ef16", "record_id": "flaws_cloudtrail:0000568:ddb0715b-e3b9-4d35-bdb8-5f39c586ef16", "row_index": 568, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddb0715b-e3b9-4d35-bdb8-5f39c586ef16", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "143b8a4a-7d94-42d3-b452-2f667a9bef9e", "record_id": "flaws_cloudtrail:0000569:143b8a4a-7d94-42d3-b452-2f667a9bef9e", "row_index": 569, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "143b8a4a-7d94-42d3-b452-2f667a9bef9e", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9cb55f-2fcd-4bfe-b60e-0bf3a1396fb9", "record_id": "flaws_cloudtrail:0000570:6f9cb55f-2fcd-4bfe-b60e-0bf3a1396fb9", "row_index": 570, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9cb55f-2fcd-4bfe-b60e-0bf3a1396fb9", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e920861-3a6d-40ca-a98e-90cf80be3bbe", "record_id": "flaws_cloudtrail:0000571:e920861-3a6d-40ca-a98e-90cf80be3bbe", "row_index": 571, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e920861-3a6d-40ca-a98e-90cf80be3bbe", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e5f3280-215e-40c3-a3db-2081905bccaa", "record_id": "flaws_cloudtrail:0000572:9e5f3280-215e-40c3-a3db-2081905bccaa", "row_index": 572, "timestamp": "2017-05-27T03:15:25Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e5f3280-215e-40c3-a3db-2081905bccaa", "eventTime": "2017-05-27T03:15:25Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d8e84b-e1b2-43ce-80b5-da3e982529bf4", "record_id": "flaws_cloudtrail:0000573:c7d8e84b-e1b2-43ce-80b5-da3e982529bf4", "row_index": 573, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d8e84b-e1b2-43ce-80b5-da3e982529bf4", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "493a0149-ade1-4eb5-82bf-268c78be3931", "record_id": "flaws_cloudtrail:0000574:493a0149-ade1-4eb5-82bf-268c78be3931", "row_index": 574, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "493a0149-ade1-4eb5-82bf-268c78be3931", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80ca5a2-a824-4680-8586-6d30cc43c441", "record_id": "flaws_cloudtrail:0000575:b80ca5a2-a824-4680-8586-6d30cc43c441", "row_index": 575, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80ca5a2-a824-4680-8586-6d30cc43c441", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb6f9049-90b0-4858-8953-619f3c67677", "record_id": "flaws_cloudtrail:0000576:cb6f9049-90b0-4858-8953-619f3c67677", "row_index": 576, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb6f9049-90b0-4858-8953-619f3c67677", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5cb6f48-3178-4696-8fc3-a49d698d8051", "record_id": "flaws_cloudtrail:0000577:a5cb6f48-3178-4696-8fc3-a49d698d8051", "row_index": 577, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5cb6f48-3178-4696-8fc3-a49d698d8051", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e712c4f-0d76-42ca-b267-d13879cb1", "record_id": "flaws_cloudtrail:0000578:0e712c4f-0d76-42ca-b267-d13879cb1", "row_index": 578, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e712c4f-0d76-42ca-b267-d13879cb1", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7bbed6-6832-4a93-b8e0-a8eae2b333928", "record_id": "flaws_cloudtrail:0000579:9b7bbed6-6832-4a93-b8e0-a8eae2b333928", "row_index": 579, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7bbed6-6832-4a93-b8e0-a8eae2b333928", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4001a59-70cc-400f-8d73-da08f50578b6", "record_id": "flaws_cloudtrail:0000580:f4001a59-70cc-400f-8d73-da08f50578b6", "row_index": 580, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4001a59-70cc-400f-8d73-da08f50578b6", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4564be68-83d9-4bd4-a510-aacfc7f799159", "record_id": "flaws_cloudtrail:0000581:4564be68-83d9-4bd4-a510-aacfc7f799159", "row_index": 581, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4564be68-83d9-4bd4-a510-aacfc7f799159", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a94485-44b6-4aac-96a6-b316b934132a", "record_id": "flaws_cloudtrail:0000582:9a94485-44b6-4aac-96a6-b316b934132a", "row_index": 582, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a94485-44b6-4aac-96a6-b316b934132a", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2be4896a-cc8d-43b8-8206-1ab11a2addd9", "record_id": "flaws_cloudtrail:0000583:2be4896a-cc8d-43b8-8206-1ab11a2addd9", "row_index": 583, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2be4896a-cc8d-43b8-8206-1ab11a2addd9", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "995a792c-5e1a-4f98-821c-4e291a344e53", "record_id": "flaws_cloudtrail:0000584:995a792c-5e1a-4f98-821c-4e291a344e53", "row_index": 584, "timestamp": "2017-05-27T03:15:26Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "995a792c-5e1a-4f98-821c-4e291a344e53", "eventTime": "2017-05-27T03:15:26Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4daeee1-62b9-4a45-a789-1c4a72bb0d93", "record_id": "flaws_cloudtrail:0000585:e4daeee1-62b9-4a45-a789-1c4a72bb0d93", "row_index": 585, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAJ9LAV70YZ3RJL3S2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4daeee1-62b9-4a45-a789-1c4a72bb0d93", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAJ9LAV70YZ3RJL3S2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c779d3cb-0d55-4e64-b7ec-9dc78838aaf8", "record_id": "flaws_cloudtrail:0000586:c779d3cb-0d55-4e64-b7ec-9dc78838aaf8", "row_index": 586, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c779d3cb-0d55-4e64-b7ec-9dc78838aaf8", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ac976da-bff0-43fe-a9b9-43db4bda21be", "record_id": "flaws_cloudtrail:0000587:7ac976da-bff0-43fe-a9b9-43db4bda21be", "row_index": 587, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ac976da-bff0-43fe-a9b9-43db4bda21be", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da15b4c8-ef7b-4a0a-9dda-3f9db1a49007", "record_id": "flaws_cloudtrail:0000588:da15b4c8-ef7b-4a0a-9dda-3f9db1a49007", "row_index": 588, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da15b4c8-ef7b-4a0a-9dda-3f9db1a49007", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "905c157a-6b82-4478-a4e9-d57f98344fe", "record_id": "flaws_cloudtrail:0000589:905c157a-6b82-4478-a4e9-d57f98344fe", "row_index": 589, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "905c157a-6b82-4478-a4e9-d57f98344fe", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b38c031-2991-48fd-848d-9bd2e981b992", "record_id": "flaws_cloudtrail:0000590:1b38c031-2991-48fd-848d-9bd2e981b992", "row_index": 590, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b38c031-2991-48fd-848d-9bd2e981b992", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc4fb21-313b-42ca-a6e4-7db06f774803", "record_id": "flaws_cloudtrail:0000591:2fc4fb21-313b-42ca-a6e4-7db06f774803", "row_index": 591, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc4fb21-313b-42ca-a6e4-7db06f774803", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea6d229-690f-407f-b57d-25c4251a10e7", "record_id": "flaws_cloudtrail:0000592:1ea6d229-690f-407f-b57d-25c4251a10e7", "row_index": 592, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea6d229-690f-407f-b57d-25c4251a10e7", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2726ad87-9f79-4bb6-8993-9fca6fb1a957", "record_id": "flaws_cloudtrail:0000593:2726ad87-9f79-4bb6-8993-9fca6fb1a957", "row_index": 593, "timestamp": "2017-05-27T03:15:27Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2726ad87-9f79-4bb6-8993-9fca6fb1a957", "eventTime": "2017-05-27T03:15:27Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e53e72-6946-47b8-8ce4-fc728e22612a", "record_id": "flaws_cloudtrail:0000594:73e53e72-6946-47b8-8ce4-fc728e22612a", "row_index": 594, "timestamp": "2017-05-27T03:15:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e53e72-6946-47b8-8ce4-fc728e22612a", "eventTime": "2017-05-27T03:15:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3978f7a8-708d-4808-aa21-855d755ab216", "record_id": "flaws_cloudtrail:0000595:3978f7a8-708d-4808-aa21-855d755ab216", "row_index": 595, "timestamp": "2017-05-27T03:15:28Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3978f7a8-708d-4808-aa21-855d755ab216", "eventTime": "2017-05-27T03:15:28Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fbb0aca-0f39-4399-adae-9a35267a7b68", "record_id": "flaws_cloudtrail:0000596:3fbb0aca-0f39-4399-adae-9a35267a7b68", "row_index": 596, "timestamp": "2017-05-27T03:15:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1136, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fbb0aca-0f39-4399-adae-9a35267a7b68", "eventTime": "2017-05-27T03:15:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19839d2c-7499-4248-aa12-8250ee1f949e", "record_id": "flaws_cloudtrail:0000597:19839d2c-7499-4248-aa12-8250ee1f949e", "row_index": 597, "timestamp": "2017-05-27T03:15:28Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19839d2c-7499-4248-aa12-8250ee1f949e", "eventTime": "2017-05-27T03:15:28Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4f2dd66-cbc8-46c1-ad44-5b2af8ca2ecd", "record_id": "flaws_cloudtrail:0000598:f4f2dd66-cbc8-46c1-ad44-5b2af8ca2ecd", "row_index": 598, "timestamp": "2017-05-27T03:15:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA8Z5SS9PFV39V50SU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4f2dd66-cbc8-46c1-ad44-5b2af8ca2ecd", "eventTime": "2017-05-27T03:15:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA8Z5SS9PFV39V50SU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T02:45:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f82b4e71-2413-49ad-a72e-0325894ba5d0", "record_id": "flaws_cloudtrail:0000599:f82b4e71-2413-49ad-a72e-0325894ba5d0", "row_index": 599, "timestamp": "2017-05-27T03:16:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 559, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f82b4e71-2413-49ad-a72e-0325894ba5d0", "eventTime": "2017-05-27T03:16:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2bf3ebd-85d2-4ee3-b871-db92135e14c1", "record_id": "flaws_cloudtrail:0000600:d2bf3ebd-85d2-4ee3-b871-db92135e14c1", "row_index": 600, "timestamp": "2017-05-27T03:16:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 554, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2bf3ebd-85d2-4ee3-b871-db92135e14c1", "eventTime": "2017-05-27T03:16:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f754be2a-4247-457e-8adb-8231fce2b6f0", "record_id": "flaws_cloudtrail:0000601:f754be2a-4247-457e-8adb-8231fce2b6f0", "row_index": 601, "timestamp": "2017-05-27T03:17:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 564, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f754be2a-4247-457e-8adb-8231fce2b6f0", "eventTime": "2017-05-27T03:17:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1903a72-bfb7-4531-8b53-983cf0392f73", "record_id": "flaws_cloudtrail:0000602:c1903a72-bfb7-4531-8b53-983cf0392f73", "row_index": 602, "timestamp": "2017-05-27T03:18:33Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1903a72-bfb7-4531-8b53-983cf0392f73", "eventTime": "2017-05-27T03:18:33Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81422f94-46ea-417d-9aa6-c9bbf103670f", "record_id": "flaws_cloudtrail:0000603:81422f94-46ea-417d-9aa6-c9bbf103670f", "row_index": 603, "timestamp": "2017-05-27T03:19:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 552, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81422f94-46ea-417d-9aa6-c9bbf103670f", "eventTime": "2017-05-27T03:19:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d480e0ec-d446-4b4c-9ce1-d3173befd7b9", "record_id": "flaws_cloudtrail:0000604:d480e0ec-d446-4b4c-9ce1-d3173befd7b9", "row_index": 604, "timestamp": "2017-05-27T03:20:29Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d480e0ec-d446-4b4c-9ce1-d3173befd7b9", "eventTime": "2017-05-27T03:20:29Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0f3794b-93c3-4583-8a60-f735b68e5d8b", "record_id": "flaws_cloudtrail:0000605:a0f3794b-93c3-4583-8a60-f735b68e5d8b", "row_index": 605, "timestamp": "2017-05-27T03:21:20Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAVVOL45ZFQOYCFUKX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "103.137.34.105", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 561, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0f3794b-93c3-4583-8a60-f735b68e5d8b", "eventTime": "2017-05-27T03:21:20Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "103.137.34.105", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAVVOL45ZFQOYCFUKX", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ccc065d-86cb-4f90-93f4-ffde67a2eba4", "record_id": "flaws_cloudtrail:0000606:3ccc065d-86cb-4f90-93f4-ffde67a2eba4", "row_index": 606, "timestamp": "2017-05-27T03:29:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ccc065d-86cb-4f90-93f4-ffde67a2eba4", "eventTime": "2017-05-27T03:29:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI8GMQFOAMPVEKUMN", "expiration": "May 27, 2017 4:29:38 AM", "sessionToken": "FQoDYXdzECUaDOktLr8kUpoW1j9uGSLMAbdCSZ3pNPcGd9ij3pJLo+EaUzwOzyS39OAy580IxbshR1P7SquotaRUA38FJ2TyduUfuryOm6AEY5kJeeCZFg0kTbL/KEW2YWJVDU3g6vycY1PyhM4vWTx7NTWQPin9uo0wy7/x+liKAoyP10KYvk6rbw1UsJXbCNGg7DS/CiEJHYB3CO0xW/4+FklQwnZy9XexdCneqc4B2fsv1bhTHIVvoyNsiP9j9Tmyirlh/lNlJSiBVlSPnIn8l+x86cGcOUp6WUIzhLMAnBoLSyii5aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8805cbfb-ff53-450d-bee8-499c8f90c7eb", "record_id": "flaws_cloudtrail:0000607:8805cbfb-ff53-450d-bee8-499c8f90c7eb", "row_index": 607, "timestamp": "2017-05-27T03:29:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI8GMQFOAMPVEKUMN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8805cbfb-ff53-450d-bee8-499c8f90c7eb", "eventTime": "2017-05-27T03:29:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI8GMQFOAMPVEKUMN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:29:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1fce864-1aca-4590-a97a-fa5bc0bc423b", "record_id": "flaws_cloudtrail:0000608:b1fce864-1aca-4590-a97a-fa5bc0bc423b", "row_index": 608, "timestamp": "2017-05-27T03:29:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1fce864-1aca-4590-a97a-fa5bc0bc423b", "eventTime": "2017-05-27T03:29:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARX98BY1CDA8FWLCS", "expiration": "May 27, 2017 4:29:39 AM", "sessionToken": "FQoDYXdzECUaDDXrhZl5jPKTTxPZayLMAd+s/yuymfGj5qFPLyFhEXVRB3Isx+1e3tF3nmGA5B48UAqC4puKvuqV3tzYt1xhPsU9oXBkNV9FnDb5WHjUqNlAEyXDDoeK+4Prx1nvRpEb5veY+LsYXAI5PZxfMq4YF3lJxhQwLLEFwe1jfHdAFW2y9klQB91wHsVZRJ5ZbK5QlWqODNb0oPc3KKNN7mVQGhspQs+rCMPit8k4F+YYLMsvP4b0B8uPOZ2r9wNhVoE+aQ3DDPH7GSZlNy5QwlDfkA3HcJySnwkdHmu8yiij5aPJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61239aa-6f6d-4c67-adbb-ec5f7c003eb1", "record_id": "flaws_cloudtrail:0000609:61239aa-6f6d-4c67-adbb-ec5f7c003eb1", "row_index": 609, "timestamp": "2017-05-27T03:29:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARX98BY1CDA8FWLCS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61239aa-6f6d-4c67-adbb-ec5f7c003eb1", "eventTime": "2017-05-27T03:29:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARX98BY1CDA8FWLCS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:29:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4d08d65-ecd2-4dae-a8a3-b16878d6bf17", "record_id": "flaws_cloudtrail:0000610:b4d08d65-ecd2-4dae-a8a3-b16878d6bf17", "row_index": 610, "timestamp": "2017-05-27T03:29:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARX98BY1CDA8FWLCS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4d08d65-ecd2-4dae-a8a3-b16878d6bf17", "eventTime": "2017-05-27T03:29:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARX98BY1CDA8FWLCS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:29:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b9ef850-81a1-4d4e-9340-0d26f4493be0", "record_id": "flaws_cloudtrail:0000611:6b9ef850-81a1-4d4e-9340-0d26f4493be0", "row_index": 611, "timestamp": "2017-05-27T03:29:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI8GMQFOAMPVEKUMN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b9ef850-81a1-4d4e-9340-0d26f4493be0", "eventTime": "2017-05-27T03:29:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI8GMQFOAMPVEKUMN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T03:29:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}