Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b27fbc-0e25-47c8-a86a-1479f3dbcca2", "record_id": "flaws_cloudtrail:0000000:44b27fbc-0e25-47c8-a86a-1479f3dbcca2", "row_index": 0, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b27fbc-0e25-47c8-a86a-1479f3dbcca2", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72a874433-d464-43fc-bc1c-0aba69788026", "record_id": "flaws_cloudtrail:0000001:72a874433-d464-43fc-bc1c-0aba69788026", "row_index": 1, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72a874433-d464-43fc-bc1c-0aba69788026", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8791b9c-b5b1-49da-b0b3-8b2d4df4e4c0", "record_id": "flaws_cloudtrail:0000002:e8791b9c-b5b1-49da-b0b3-8b2d4df4e4c0", "row_index": 2, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8791b9c-b5b1-49da-b0b3-8b2d4df4e4c0", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c6cb9e-5de3-49ee-a56c-532e5e48f472", "record_id": "flaws_cloudtrail:0000003:c5c6cb9e-5de3-49ee-a56c-532e5e48f472", "row_index": 3, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c6cb9e-5de3-49ee-a56c-532e5e48f472", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c23475-8f24-4bd4-9b86-0d033913e728", "record_id": "flaws_cloudtrail:0000004:1c23475-8f24-4bd4-9b86-0d033913e728", "row_index": 4, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c23475-8f24-4bd4-9b86-0d033913e728", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3df5e0c7-8c2c-4638-9ef2-17de86d176685", "record_id": "flaws_cloudtrail:0000005:3df5e0c7-8c2c-4638-9ef2-17de86d176685", "row_index": 5, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3df5e0c7-8c2c-4638-9ef2-17de86d176685", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed26e3c7-a116-47a8-8b9d-92347ebeb7b7", "record_id": "flaws_cloudtrail:0000006:ed26e3c7-a116-47a8-8b9d-92347ebeb7b7", "row_index": 6, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed26e3c7-a116-47a8-8b9d-92347ebeb7b7", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aca7d40-a2bb-4112-9ef1-7c6106a84695", "record_id": "flaws_cloudtrail:0000007:3aca7d40-a2bb-4112-9ef1-7c6106a84695", "row_index": 7, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aca7d40-a2bb-4112-9ef1-7c6106a84695", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af594ebc-5ec3-47a7-8123-6d14409f6bf6", "record_id": "flaws_cloudtrail:0000008:af594ebc-5ec3-47a7-8123-6d14409f6bf6", "row_index": 8, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af594ebc-5ec3-47a7-8123-6d14409f6bf6", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b05f6302-6279-4c46-9684-55b99e7c09c7", "record_id": "flaws_cloudtrail:0000009:b05f6302-6279-4c46-9684-55b99e7c09c7", "row_index": 9, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b05f6302-6279-4c46-9684-55b99e7c09c7", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76f974a-f0fd-481a-9b9a-bf58e18377b7", "record_id": "flaws_cloudtrail:0000010:f76f974a-f0fd-481a-9b9a-bf58e18377b7", "row_index": 10, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76f974a-f0fd-481a-9b9a-bf58e18377b7", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc6c4cff-b864-41e2-b089-a44abf4865cb", "record_id": "flaws_cloudtrail:0000011:dc6c4cff-b864-41e2-b089-a44abf4865cb", "row_index": 11, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc6c4cff-b864-41e2-b089-a44abf4865cb", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fc73e77-f6b1-4c7c-bd6a-54b06ba38756", "record_id": "flaws_cloudtrail:0000012:1fc73e77-f6b1-4c7c-bd6a-54b06ba38756", "row_index": 12, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fc73e77-f6b1-4c7c-bd6a-54b06ba38756", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7015f8e0-0349-413e-9033-231f9f9d4614", "record_id": "flaws_cloudtrail:0000013:7015f8e0-0349-413e-9033-231f9f9d4614", "row_index": 13, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7015f8e0-0349-413e-9033-231f9f9d4614", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6103e38c-4681-4ec9-9d19-ce64da731176", "record_id": "flaws_cloudtrail:0000014:6103e38c-4681-4ec9-9d19-ce64da731176", "row_index": 14, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6103e38c-4681-4ec9-9d19-ce64da731176", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d3d7c16-1cce-4bc7-ac8a-e751dbda4f7c", "record_id": "flaws_cloudtrail:0000015:0d3d7c16-1cce-4bc7-ac8a-e751dbda4f7c", "row_index": 15, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d3d7c16-1cce-4bc7-ac8a-e751dbda4f7c", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97313b71-1b9f-4174-b5ab-09411547c69b", "record_id": "flaws_cloudtrail:0000016:97313b71-1b9f-4174-b5ab-09411547c69b", "row_index": 16, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97313b71-1b9f-4174-b5ab-09411547c69b", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed92926-d346-42cf-bef9-6b0e5d2d2130", "record_id": "flaws_cloudtrail:0000017:aed92926-d346-42cf-bef9-6b0e5d2d2130", "row_index": 17, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed92926-d346-42cf-bef9-6b0e5d2d2130", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5382f337-bcbd-4f48-8478-baa8aa971339", "record_id": "flaws_cloudtrail:0000018:5382f337-bcbd-4f48-8478-baa8aa971339", "row_index": 18, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5382f337-bcbd-4f48-8478-baa8aa971339", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e149679-1642-4044-a6d3-235432199741", "record_id": "flaws_cloudtrail:0000019:88e149679-1642-4044-a6d3-235432199741", "row_index": 19, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e149679-1642-4044-a6d3-235432199741", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7d18f5-60ac-4280-9878-87205bac2caa", "record_id": "flaws_cloudtrail:0000020:7f7d18f5-60ac-4280-9878-87205bac2caa", "row_index": 20, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7d18f5-60ac-4280-9878-87205bac2caa", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c68f40c-1bad-4b7a-8e91-1f20509f", "record_id": "flaws_cloudtrail:0000021:5c68f40c-1bad-4b7a-8e91-1f20509f", "row_index": 21, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c68f40c-1bad-4b7a-8e91-1f20509f", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20b5e774-f962-4ba1-a58f-c00fdbc4852d", "record_id": "flaws_cloudtrail:0000022:20b5e774-f962-4ba1-a58f-c00fdbc4852d", "row_index": 22, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20b5e774-f962-4ba1-a58f-c00fdbc4852d", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3a033f1-9103-46ae-a183-4b63c0d501673", "record_id": "flaws_cloudtrail:0000023:f3a033f1-9103-46ae-a183-4b63c0d501673", "row_index": 23, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3a033f1-9103-46ae-a183-4b63c0d501673", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017b583c-af6a-4e73-af61-6918f001f5cd", "record_id": "flaws_cloudtrail:0000024:017b583c-af6a-4e73-af61-6918f001f5cd", "row_index": 24, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017b583c-af6a-4e73-af61-6918f001f5cd", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57f664aa-a5f4-4cda-985b-c15f2f5a27f4", "record_id": "flaws_cloudtrail:0000025:57f664aa-a5f4-4cda-985b-c15f2f5a27f4", "row_index": 25, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57f664aa-a5f4-4cda-985b-c15f2f5a27f4", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3860b7-9af7-4cba-9c3b-085c2640870c", "record_id": "flaws_cloudtrail:0000026:6d3860b7-9af7-4cba-9c3b-085c2640870c", "row_index": 26, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3860b7-9af7-4cba-9c3b-085c2640870c", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac992aee-033d-4684-a219-9f7cdc36beb2", "record_id": "flaws_cloudtrail:0000027:ac992aee-033d-4684-a219-9f7cdc36beb2", "row_index": 27, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac992aee-033d-4684-a219-9f7cdc36beb2", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19fc2cdd-f3af-4fee-9b15-e726926fdbf73", "record_id": "flaws_cloudtrail:0000028:19fc2cdd-f3af-4fee-9b15-e726926fdbf73", "row_index": 28, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19fc2cdd-f3af-4fee-9b15-e726926fdbf73", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a439895-a31b-4bca-a673-57d413c6a71e", "record_id": "flaws_cloudtrail:0000029:7a439895-a31b-4bca-a673-57d413c6a71e", "row_index": 29, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a439895-a31b-4bca-a673-57d413c6a71e", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "110ed2fc-bbb3-4bbf-a2ea-a7bef2c60f63", "record_id": "flaws_cloudtrail:0000030:110ed2fc-bbb3-4bbf-a2ea-a7bef2c60f63", "row_index": 30, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "110ed2fc-bbb3-4bbf-a2ea-a7bef2c60f63", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22e0fde6-ef7c-46a2-972c-ddae1703deef", "record_id": "flaws_cloudtrail:0000031:22e0fde6-ef7c-46a2-972c-ddae1703deef", "row_index": 31, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22e0fde6-ef7c-46a2-972c-ddae1703deef", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "801312c-d7ee-4512-86de-18171b4eaf19", "record_id": "flaws_cloudtrail:0000032:801312c-d7ee-4512-86de-18171b4eaf19", "row_index": 32, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "801312c-d7ee-4512-86de-18171b4eaf19", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67196e-bd96-4415-86bb-962eae198c62", "record_id": "flaws_cloudtrail:0000033:67196e-bd96-4415-86bb-962eae198c62", "row_index": 33, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67196e-bd96-4415-86bb-962eae198c62", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b27fbc-0e25-47c8-a86a-1479f3dbcca2", "record_id": "flaws_cloudtrail:0000034:44b27fbc-0e25-47c8-a86a-1479f3dbcca2", "row_index": 34, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b27fbc-0e25-47c8-a86a-1479f3dbcca2", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72a874433-d464-43fc-bc1c-0aba69788026", "record_id": "flaws_cloudtrail:0000035:72a874433-d464-43fc-bc1c-0aba69788026", "row_index": 35, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72a874433-d464-43fc-bc1c-0aba69788026", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8791b9c-b5b1-49da-b0b3-8b2d4df4e4c0", "record_id": "flaws_cloudtrail:0000036:e8791b9c-b5b1-49da-b0b3-8b2d4df4e4c0", "row_index": 36, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8791b9c-b5b1-49da-b0b3-8b2d4df4e4c0", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c6cb9e-5de3-49ee-a56c-532e5e48f472", "record_id": "flaws_cloudtrail:0000037:c5c6cb9e-5de3-49ee-a56c-532e5e48f472", "row_index": 37, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c6cb9e-5de3-49ee-a56c-532e5e48f472", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c23475-8f24-4bd4-9b86-0d033913e728", "record_id": "flaws_cloudtrail:0000038:1c23475-8f24-4bd4-9b86-0d033913e728", "row_index": 38, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c23475-8f24-4bd4-9b86-0d033913e728", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3df5e0c7-8c2c-4638-9ef2-17de86d176685", "record_id": "flaws_cloudtrail:0000039:3df5e0c7-8c2c-4638-9ef2-17de86d176685", "row_index": 39, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3df5e0c7-8c2c-4638-9ef2-17de86d176685", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed26e3c7-a116-47a8-8b9d-92347ebeb7b7", "record_id": "flaws_cloudtrail:0000040:ed26e3c7-a116-47a8-8b9d-92347ebeb7b7", "row_index": 40, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed26e3c7-a116-47a8-8b9d-92347ebeb7b7", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aca7d40-a2bb-4112-9ef1-7c6106a84695", "record_id": "flaws_cloudtrail:0000041:3aca7d40-a2bb-4112-9ef1-7c6106a84695", "row_index": 41, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aca7d40-a2bb-4112-9ef1-7c6106a84695", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af594ebc-5ec3-47a7-8123-6d14409f6bf6", "record_id": "flaws_cloudtrail:0000042:af594ebc-5ec3-47a7-8123-6d14409f6bf6", "row_index": 42, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af594ebc-5ec3-47a7-8123-6d14409f6bf6", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b05f6302-6279-4c46-9684-55b99e7c09c7", "record_id": "flaws_cloudtrail:0000043:b05f6302-6279-4c46-9684-55b99e7c09c7", "row_index": 43, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 944, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b05f6302-6279-4c46-9684-55b99e7c09c7", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76f974a-f0fd-481a-9b9a-bf58e18377b7", "record_id": "flaws_cloudtrail:0000044:f76f974a-f0fd-481a-9b9a-bf58e18377b7", "row_index": 44, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76f974a-f0fd-481a-9b9a-bf58e18377b7", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc6c4cff-b864-41e2-b089-a44abf4865cb", "record_id": "flaws_cloudtrail:0000045:dc6c4cff-b864-41e2-b089-a44abf4865cb", "row_index": 45, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc6c4cff-b864-41e2-b089-a44abf4865cb", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fc73e77-f6b1-4c7c-bd6a-54b06ba38756", "record_id": "flaws_cloudtrail:0000046:1fc73e77-f6b1-4c7c-bd6a-54b06ba38756", "row_index": 46, "timestamp": "2019-07-08T15:44:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fc73e77-f6b1-4c7c-bd6a-54b06ba38756", "eventTime": "2019-07-08T15:44:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882b1384-09ae-4bee-b609-bbea338ea30c", "record_id": "flaws_cloudtrail:0000047:882b1384-09ae-4bee-b609-bbea338ea30c", "row_index": 47, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882b1384-09ae-4bee-b609-bbea338ea30c", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c135d357-838d-456a-86cf-8b343e730172", "record_id": "flaws_cloudtrail:0000048:c135d357-838d-456a-86cf-8b343e730172", "row_index": 48, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c135d357-838d-456a-86cf-8b343e730172", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8c58ca-1abc-4fae-9f12-829a8cd58c03", "record_id": "flaws_cloudtrail:0000049:cc8c58ca-1abc-4fae-9f12-829a8cd58c03", "row_index": 49, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8c58ca-1abc-4fae-9f12-829a8cd58c03", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535037cf-4a94-42d5-8715-ad13fb1fe2af", "record_id": "flaws_cloudtrail:0000050:535037cf-4a94-42d5-8715-ad13fb1fe2af", "row_index": 50, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535037cf-4a94-42d5-8715-ad13fb1fe2af", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3a5f14-fa88-4c69-8c6f-8dc56879ce8d", "record_id": "flaws_cloudtrail:0000051:1c3a5f14-fa88-4c69-8c6f-8dc56879ce8d", "row_index": 51, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3a5f14-fa88-4c69-8c6f-8dc56879ce8d", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a70378d8-f994-4598-a2c5-27a6bc8922ab", "record_id": "flaws_cloudtrail:0000052:a70378d8-f994-4598-a2c5-27a6bc8922ab", "row_index": 52, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a70378d8-f994-4598-a2c5-27a6bc8922ab", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93eab413-7d85-44b8-81f9-d3c6c44201b4", "record_id": "flaws_cloudtrail:0000053:93eab413-7d85-44b8-81f9-d3c6c44201b4", "row_index": 53, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93eab413-7d85-44b8-81f9-d3c6c44201b4", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5075b516-672b-414a-96ae-7b0c9f381a45", "record_id": "flaws_cloudtrail:0000054:5075b516-672b-414a-96ae-7b0c9f381a45", "row_index": 54, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5075b516-672b-414a-96ae-7b0c9f381a45", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89385a-698b-4a06-8dcc-9c1037e543f2", "record_id": "flaws_cloudtrail:0000055:b89385a-698b-4a06-8dcc-9c1037e543f2", "row_index": 55, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89385a-698b-4a06-8dcc-9c1037e543f2", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e53b3623-dd3c-4451-9183-a1c4f38dac37", "record_id": "flaws_cloudtrail:0000056:e53b3623-dd3c-4451-9183-a1c4f38dac37", "row_index": 56, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e53b3623-dd3c-4451-9183-a1c4f38dac37", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5371f73b-1cc0-4e05-89f5-ca679abf9af7", "record_id": "flaws_cloudtrail:0000057:5371f73b-1cc0-4e05-89f5-ca679abf9af7", "row_index": 57, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5371f73b-1cc0-4e05-89f5-ca679abf9af7", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da779261-1b8d-4aa8-9597-296849f964bef", "record_id": "flaws_cloudtrail:0000058:da779261-1b8d-4aa8-9597-296849f964bef", "row_index": 58, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da779261-1b8d-4aa8-9597-296849f964bef", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190afd64-b570-404b-93e1-92d9c72b8e14", "record_id": "flaws_cloudtrail:0000059:190afd64-b570-404b-93e1-92d9c72b8e14", "row_index": 59, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190afd64-b570-404b-93e1-92d9c72b8e14", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882b1384-09ae-4bee-b609-bbea338ea30c", "record_id": "flaws_cloudtrail:0000060:882b1384-09ae-4bee-b609-bbea338ea30c", "row_index": 60, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882b1384-09ae-4bee-b609-bbea338ea30c", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c135d357-838d-456a-86cf-8b343e730172", "record_id": "flaws_cloudtrail:0000061:c135d357-838d-456a-86cf-8b343e730172", "row_index": 61, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c135d357-838d-456a-86cf-8b343e730172", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8c58ca-1abc-4fae-9f12-829a8cd58c03", "record_id": "flaws_cloudtrail:0000062:cc8c58ca-1abc-4fae-9f12-829a8cd58c03", "row_index": 62, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8c58ca-1abc-4fae-9f12-829a8cd58c03", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535037cf-4a94-42d5-8715-ad13fb1fe2af", "record_id": "flaws_cloudtrail:0000063:535037cf-4a94-42d5-8715-ad13fb1fe2af", "row_index": 63, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535037cf-4a94-42d5-8715-ad13fb1fe2af", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3a5f14-fa88-4c69-8c6f-8dc56879ce8d", "record_id": "flaws_cloudtrail:0000064:1c3a5f14-fa88-4c69-8c6f-8dc56879ce8d", "row_index": 64, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3a5f14-fa88-4c69-8c6f-8dc56879ce8d", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a70378d8-f994-4598-a2c5-27a6bc8922ab", "record_id": "flaws_cloudtrail:0000065:a70378d8-f994-4598-a2c5-27a6bc8922ab", "row_index": 65, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a70378d8-f994-4598-a2c5-27a6bc8922ab", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93eab413-7d85-44b8-81f9-d3c6c44201b4", "record_id": "flaws_cloudtrail:0000066:93eab413-7d85-44b8-81f9-d3c6c44201b4", "row_index": 66, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93eab413-7d85-44b8-81f9-d3c6c44201b4", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5075b516-672b-414a-96ae-7b0c9f381a45", "record_id": "flaws_cloudtrail:0000067:5075b516-672b-414a-96ae-7b0c9f381a45", "row_index": 67, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5075b516-672b-414a-96ae-7b0c9f381a45", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89385a-698b-4a06-8dcc-9c1037e543f2", "record_id": "flaws_cloudtrail:0000068:b89385a-698b-4a06-8dcc-9c1037e543f2", "row_index": 68, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89385a-698b-4a06-8dcc-9c1037e543f2", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e53b3623-dd3c-4451-9183-a1c4f38dac37", "record_id": "flaws_cloudtrail:0000069:e53b3623-dd3c-4451-9183-a1c4f38dac37", "row_index": 69, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e53b3623-dd3c-4451-9183-a1c4f38dac37", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5371f73b-1cc0-4e05-89f5-ca679abf9af7", "record_id": "flaws_cloudtrail:0000070:5371f73b-1cc0-4e05-89f5-ca679abf9af7", "row_index": 70, "timestamp": "2019-07-08T15:44:20Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5371f73b-1cc0-4e05-89f5-ca679abf9af7", "eventTime": "2019-07-08T15:44:20Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da779261-1b8d-4aa8-9597-296849f964bef", "record_id": "flaws_cloudtrail:0000071:da779261-1b8d-4aa8-9597-296849f964bef", "row_index": 71, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da779261-1b8d-4aa8-9597-296849f964bef", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190afd64-b570-404b-93e1-92d9c72b8e14", "record_id": "flaws_cloudtrail:0000072:190afd64-b570-404b-93e1-92d9c72b8e14", "row_index": 72, "timestamp": "2019-07-08T15:44:20Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190afd64-b570-404b-93e1-92d9c72b8e14", "eventTime": "2019-07-08T15:44:20Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4947ac0-f260-4657-8420-75ac71ce970d", "record_id": "flaws_cloudtrail:0000073:e4947ac0-f260-4657-8420-75ac71ce970d", "row_index": 73, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4947ac0-f260-4657-8420-75ac71ce970d", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3b53f49-c7f4-4697-aa26-b74e717590b6", "record_id": "flaws_cloudtrail:0000074:a3b53f49-c7f4-4697-aa26-b74e717590b6", "row_index": 74, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3b53f49-c7f4-4697-aa26-b74e717590b6", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8f28c4f-3a52-461d-adc6-e35e3a1740a4", "record_id": "flaws_cloudtrail:0000075:e8f28c4f-3a52-461d-adc6-e35e3a1740a4", "row_index": 75, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8f28c4f-3a52-461d-adc6-e35e3a1740a4", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e389daa-2c24-4ee0-8a67-560462fb236a3", "record_id": "flaws_cloudtrail:0000076:5e389daa-2c24-4ee0-8a67-560462fb236a3", "row_index": 76, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e389daa-2c24-4ee0-8a67-560462fb236a3", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e049fff9-560f-4662-80ef-32bc914e0688", "record_id": "flaws_cloudtrail:0000077:e049fff9-560f-4662-80ef-32bc914e0688", "row_index": 77, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e049fff9-560f-4662-80ef-32bc914e0688", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2393cbb-404b-4e0c-884c-b95e3e39e93f", "record_id": "flaws_cloudtrail:0000078:c2393cbb-404b-4e0c-884c-b95e3e39e93f", "row_index": 78, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2393cbb-404b-4e0c-884c-b95e3e39e93f", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b85c510-2ec3-44f6-ae09-705a59f7ac5b", "record_id": "flaws_cloudtrail:0000079:1b85c510-2ec3-44f6-ae09-705a59f7ac5b", "row_index": 79, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b85c510-2ec3-44f6-ae09-705a59f7ac5b", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365697b59-90f4-4709-a364-656191c5fe52c", "record_id": "flaws_cloudtrail:0000080:365697b59-90f4-4709-a364-656191c5fe52c", "row_index": 80, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365697b59-90f4-4709-a364-656191c5fe52c", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fee78ef4-1702-46de-a8cf-9621e6dd4a9c", "record_id": "flaws_cloudtrail:0000081:fee78ef4-1702-46de-a8cf-9621e6dd4a9c", "row_index": 81, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fee78ef4-1702-46de-a8cf-9621e6dd4a9c", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c496ff1-b3fd-4783-b413-9b8640f6bf0b", "record_id": "flaws_cloudtrail:0000082:1c496ff1-b3fd-4783-b413-9b8640f6bf0b", "row_index": 82, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c496ff1-b3fd-4783-b413-9b8640f6bf0b", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "109f2d2c-7c91-4efa-a867-b09ba3eac2ef", "record_id": "flaws_cloudtrail:0000083:109f2d2c-7c91-4efa-a867-b09ba3eac2ef", "row_index": 83, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "109f2d2c-7c91-4efa-a867-b09ba3eac2ef", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10cb4f40-8097-4c72-abe7-351263b52d9e4", "record_id": "flaws_cloudtrail:0000084:10cb4f40-8097-4c72-abe7-351263b52d9e4", "row_index": 84, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10cb4f40-8097-4c72-abe7-351263b52d9e4", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "693147-33c3-4123-bab3-8806e3f9d57f", "record_id": "flaws_cloudtrail:0000085:693147-33c3-4123-bab3-8806e3f9d57f", "row_index": 85, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "693147-33c3-4123-bab3-8806e3f9d57f", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43bd5d9-e333-4a8d-b5d4-f69e4f0b99ef", "record_id": "flaws_cloudtrail:0000086:a43bd5d9-e333-4a8d-b5d4-f69e4f0b99ef", "row_index": 86, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43bd5d9-e333-4a8d-b5d4-f69e4f0b99ef", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50b89fae-d9da-47db-8a69-9d664a90f6a6", "record_id": "flaws_cloudtrail:0000087:50b89fae-d9da-47db-8a69-9d664a90f6a6", "row_index": 87, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50b89fae-d9da-47db-8a69-9d664a90f6a6", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f519c5-1ea0-4fd3-8f75-5fd86f852d02", "record_id": "flaws_cloudtrail:0000088:a5f519c5-1ea0-4fd3-8f75-5fd86f852d02", "row_index": 88, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f519c5-1ea0-4fd3-8f75-5fd86f852d02", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "effcd5d9-792d-473d-b7ca-837a35919934", "record_id": "flaws_cloudtrail:0000089:effcd5d9-792d-473d-b7ca-837a35919934", "row_index": 89, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "effcd5d9-792d-473d-b7ca-837a35919934", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401809d34-2a46-413c-bad6-d7411c60871", "record_id": "flaws_cloudtrail:0000090:401809d34-2a46-413c-bad6-d7411c60871", "row_index": 90, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401809d34-2a46-413c-bad6-d7411c60871", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4947ac0-f260-4657-8420-75ac71ce970d", "record_id": "flaws_cloudtrail:0000091:e4947ac0-f260-4657-8420-75ac71ce970d", "row_index": 91, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4947ac0-f260-4657-8420-75ac71ce970d", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3b53f49-c7f4-4697-aa26-b74e717590b6", "record_id": "flaws_cloudtrail:0000092:a3b53f49-c7f4-4697-aa26-b74e717590b6", "row_index": 92, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3b53f49-c7f4-4697-aa26-b74e717590b6", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8f28c4f-3a52-461d-adc6-e35e3a1740a4", "record_id": "flaws_cloudtrail:0000093:e8f28c4f-3a52-461d-adc6-e35e3a1740a4", "row_index": 93, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8f28c4f-3a52-461d-adc6-e35e3a1740a4", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e389daa-2c24-4ee0-8a67-560462fb236a3", "record_id": "flaws_cloudtrail:0000094:5e389daa-2c24-4ee0-8a67-560462fb236a3", "row_index": 94, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e389daa-2c24-4ee0-8a67-560462fb236a3", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e049fff9-560f-4662-80ef-32bc914e0688", "record_id": "flaws_cloudtrail:0000095:e049fff9-560f-4662-80ef-32bc914e0688", "row_index": 95, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e049fff9-560f-4662-80ef-32bc914e0688", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2393cbb-404b-4e0c-884c-b95e3e39e93f", "record_id": "flaws_cloudtrail:0000096:c2393cbb-404b-4e0c-884c-b95e3e39e93f", "row_index": 96, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2393cbb-404b-4e0c-884c-b95e3e39e93f", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b85c510-2ec3-44f6-ae09-705a59f7ac5b", "record_id": "flaws_cloudtrail:0000097:1b85c510-2ec3-44f6-ae09-705a59f7ac5b", "row_index": 97, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b85c510-2ec3-44f6-ae09-705a59f7ac5b", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365697b59-90f4-4709-a364-656191c5fe52c", "record_id": "flaws_cloudtrail:0000098:365697b59-90f4-4709-a364-656191c5fe52c", "row_index": 98, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365697b59-90f4-4709-a364-656191c5fe52c", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fee78ef4-1702-46de-a8cf-9621e6dd4a9c", "record_id": "flaws_cloudtrail:0000099:fee78ef4-1702-46de-a8cf-9621e6dd4a9c", "row_index": 99, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fee78ef4-1702-46de-a8cf-9621e6dd4a9c", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c496ff1-b3fd-4783-b413-9b8640f6bf0b", "record_id": "flaws_cloudtrail:0000100:1c496ff1-b3fd-4783-b413-9b8640f6bf0b", "row_index": 100, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c496ff1-b3fd-4783-b413-9b8640f6bf0b", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "109f2d2c-7c91-4efa-a867-b09ba3eac2ef", "record_id": "flaws_cloudtrail:0000101:109f2d2c-7c91-4efa-a867-b09ba3eac2ef", "row_index": 101, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "109f2d2c-7c91-4efa-a867-b09ba3eac2ef", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10cb4f40-8097-4c72-abe7-351263b52d9e4", "record_id": "flaws_cloudtrail:0000102:10cb4f40-8097-4c72-abe7-351263b52d9e4", "row_index": 102, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10cb4f40-8097-4c72-abe7-351263b52d9e4", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "693147-33c3-4123-bab3-8806e3f9d57f", "record_id": "flaws_cloudtrail:0000103:693147-33c3-4123-bab3-8806e3f9d57f", "row_index": 103, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "693147-33c3-4123-bab3-8806e3f9d57f", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43bd5d9-e333-4a8d-b5d4-f69e4f0b99ef", "record_id": "flaws_cloudtrail:0000104:a43bd5d9-e333-4a8d-b5d4-f69e4f0b99ef", "row_index": 104, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43bd5d9-e333-4a8d-b5d4-f69e4f0b99ef", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50b89fae-d9da-47db-8a69-9d664a90f6a6", "record_id": "flaws_cloudtrail:0000105:50b89fae-d9da-47db-8a69-9d664a90f6a6", "row_index": 105, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50b89fae-d9da-47db-8a69-9d664a90f6a6", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f519c5-1ea0-4fd3-8f75-5fd86f852d02", "record_id": "flaws_cloudtrail:0000106:a5f519c5-1ea0-4fd3-8f75-5fd86f852d02", "row_index": 106, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f519c5-1ea0-4fd3-8f75-5fd86f852d02", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "effcd5d9-792d-473d-b7ca-837a35919934", "record_id": "flaws_cloudtrail:0000107:effcd5d9-792d-473d-b7ca-837a35919934", "row_index": 107, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "effcd5d9-792d-473d-b7ca-837a35919934", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401809d34-2a46-413c-bad6-d7411c60871", "record_id": "flaws_cloudtrail:0000108:401809d34-2a46-413c-bad6-d7411c60871", "row_index": 108, "timestamp": "2019-07-08T15:44:21Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401809d34-2a46-413c-bad6-d7411c60871", "eventTime": "2019-07-08T15:44:21Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51a5715d-0875-4e10-ab42-12f67f8c71db", "record_id": "flaws_cloudtrail:0000109:51a5715d-0875-4e10-ab42-12f67f8c71db", "row_index": 109, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51a5715d-0875-4e10-ab42-12f67f8c71db", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456245-8a3f-4f0f-9f21-fde015131d6", "record_id": "flaws_cloudtrail:0000110:456245-8a3f-4f0f-9f21-fde015131d6", "row_index": 110, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456245-8a3f-4f0f-9f21-fde015131d6", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412b208e-1ea7-4a74-8a75-99f06df488695", "record_id": "flaws_cloudtrail:0000111:412b208e-1ea7-4a74-8a75-99f06df488695", "row_index": 111, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412b208e-1ea7-4a74-8a75-99f06df488695", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b24d6779-de2a-4016-830b-4e85d3e2a89f", "record_id": "flaws_cloudtrail:0000112:b24d6779-de2a-4016-830b-4e85d3e2a89f", "row_index": 112, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b24d6779-de2a-4016-830b-4e85d3e2a89f", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b50e889-836e-4654-bdf2-e2e87ae3deb3", "record_id": "flaws_cloudtrail:0000113:3b50e889-836e-4654-bdf2-e2e87ae3deb3", "row_index": 113, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b50e889-836e-4654-bdf2-e2e87ae3deb3", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cf2bb9a-f24b-49f3-821f-44bfa4abdb2a", "record_id": "flaws_cloudtrail:0000114:6cf2bb9a-f24b-49f3-821f-44bfa4abdb2a", "row_index": 114, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cf2bb9a-f24b-49f3-821f-44bfa4abdb2a", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a780d2-bada-41a9-b0ea-e3319041cdcf", "record_id": "flaws_cloudtrail:0000115:a1a780d2-bada-41a9-b0ea-e3319041cdcf", "row_index": 115, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a780d2-bada-41a9-b0ea-e3319041cdcf", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feaf2ddb-afca-488c-955c-47687f5e27be", "record_id": "flaws_cloudtrail:0000116:feaf2ddb-afca-488c-955c-47687f5e27be", "row_index": 116, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feaf2ddb-afca-488c-955c-47687f5e27be", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74fcb50b-0c18-424c-bc19-2ef2d19e6194", "record_id": "flaws_cloudtrail:0000117:74fcb50b-0c18-424c-bc19-2ef2d19e6194", "row_index": 117, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74fcb50b-0c18-424c-bc19-2ef2d19e6194", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412078f8-e33c-478a-9630-5cfa523855ab", "record_id": "flaws_cloudtrail:0000118:412078f8-e33c-478a-9630-5cfa523855ab", "row_index": 118, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412078f8-e33c-478a-9630-5cfa523855ab", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3f2e3d-de6d-422c-84c3-7d6ec6d2df6d", "record_id": "flaws_cloudtrail:0000119:1c3f2e3d-de6d-422c-84c3-7d6ec6d2df6d", "row_index": 119, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3f2e3d-de6d-422c-84c3-7d6ec6d2df6d", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3cad89a-3f03-46e7-9d74-b6bd0889ef31", "record_id": "flaws_cloudtrail:0000120:d3cad89a-3f03-46e7-9d74-b6bd0889ef31", "row_index": 120, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3cad89a-3f03-46e7-9d74-b6bd0889ef31", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cdf02d6-e1de-440d-9dd7-c3e3ba2fd3d7", "record_id": "flaws_cloudtrail:0000121:6cdf02d6-e1de-440d-9dd7-c3e3ba2fd3d7", "row_index": 121, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cdf02d6-e1de-440d-9dd7-c3e3ba2fd3d7", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f316910e-d2bb-4322-8160-633be91a82b9", "record_id": "flaws_cloudtrail:0000122:f316910e-d2bb-4322-8160-633be91a82b9", "row_index": 122, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f316910e-d2bb-4322-8160-633be91a82b9", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1555ced-8c8a-497e-a764-3905ebc8029b", "record_id": "flaws_cloudtrail:0000123:a1555ced-8c8a-497e-a764-3905ebc8029b", "row_index": 123, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1555ced-8c8a-497e-a764-3905ebc8029b", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e092902-6b5e-4cdb-b4fc-904a8bc02148", "record_id": "flaws_cloudtrail:0000124:0e092902-6b5e-4cdb-b4fc-904a8bc02148", "row_index": 124, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e092902-6b5e-4cdb-b4fc-904a8bc02148", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "540d72e1-4e05-4493-ab36-2dc54dc318e1", "record_id": "flaws_cloudtrail:0000125:540d72e1-4e05-4493-ab36-2dc54dc318e1", "row_index": 125, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "540d72e1-4e05-4493-ab36-2dc54dc318e1", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edabde6b-b31a-4bbd-b87c-1765435a7f58", "record_id": "flaws_cloudtrail:0000126:edabde6b-b31a-4bbd-b87c-1765435a7f58", "row_index": 126, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edabde6b-b31a-4bbd-b87c-1765435a7f58", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffe287b-720c-4400-8eb2-2886ea578fa1", "record_id": "flaws_cloudtrail:0000127:7ffe287b-720c-4400-8eb2-2886ea578fa1", "row_index": 127, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffe287b-720c-4400-8eb2-2886ea578fa1", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ae055520-5657-4bc4-a39d-bf0b3821f937", "record_id": "flaws_cloudtrail:0000128:5ae055520-5657-4bc4-a39d-bf0b3821f937", "row_index": 128, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ae055520-5657-4bc4-a39d-bf0b3821f937", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a240f496-2869-4271-ab64-8f8f30d9bc6e", "record_id": "flaws_cloudtrail:0000129:a240f496-2869-4271-ab64-8f8f30d9bc6e", "row_index": 129, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a240f496-2869-4271-ab64-8f8f30d9bc6e", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51a5715d-0875-4e10-ab42-12f67f8c71db", "record_id": "flaws_cloudtrail:0000130:51a5715d-0875-4e10-ab42-12f67f8c71db", "row_index": 130, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51a5715d-0875-4e10-ab42-12f67f8c71db", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456245-8a3f-4f0f-9f21-fde015131d6", "record_id": "flaws_cloudtrail:0000131:456245-8a3f-4f0f-9f21-fde015131d6", "row_index": 131, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456245-8a3f-4f0f-9f21-fde015131d6", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412b208e-1ea7-4a74-8a75-99f06df488695", "record_id": "flaws_cloudtrail:0000132:412b208e-1ea7-4a74-8a75-99f06df488695", "row_index": 132, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412b208e-1ea7-4a74-8a75-99f06df488695", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b24d6779-de2a-4016-830b-4e85d3e2a89f", "record_id": "flaws_cloudtrail:0000133:b24d6779-de2a-4016-830b-4e85d3e2a89f", "row_index": 133, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b24d6779-de2a-4016-830b-4e85d3e2a89f", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b50e889-836e-4654-bdf2-e2e87ae3deb3", "record_id": "flaws_cloudtrail:0000134:3b50e889-836e-4654-bdf2-e2e87ae3deb3", "row_index": 134, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b50e889-836e-4654-bdf2-e2e87ae3deb3", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cf2bb9a-f24b-49f3-821f-44bfa4abdb2a", "record_id": "flaws_cloudtrail:0000135:6cf2bb9a-f24b-49f3-821f-44bfa4abdb2a", "row_index": 135, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cf2bb9a-f24b-49f3-821f-44bfa4abdb2a", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a780d2-bada-41a9-b0ea-e3319041cdcf", "record_id": "flaws_cloudtrail:0000136:a1a780d2-bada-41a9-b0ea-e3319041cdcf", "row_index": 136, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a780d2-bada-41a9-b0ea-e3319041cdcf", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feaf2ddb-afca-488c-955c-47687f5e27be", "record_id": "flaws_cloudtrail:0000137:feaf2ddb-afca-488c-955c-47687f5e27be", "row_index": 137, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feaf2ddb-afca-488c-955c-47687f5e27be", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74fcb50b-0c18-424c-bc19-2ef2d19e6194", "record_id": "flaws_cloudtrail:0000138:74fcb50b-0c18-424c-bc19-2ef2d19e6194", "row_index": 138, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74fcb50b-0c18-424c-bc19-2ef2d19e6194", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412078f8-e33c-478a-9630-5cfa523855ab", "record_id": "flaws_cloudtrail:0000139:412078f8-e33c-478a-9630-5cfa523855ab", "row_index": 139, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412078f8-e33c-478a-9630-5cfa523855ab", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3f2e3d-de6d-422c-84c3-7d6ec6d2df6d", "record_id": "flaws_cloudtrail:0000140:1c3f2e3d-de6d-422c-84c3-7d6ec6d2df6d", "row_index": 140, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3f2e3d-de6d-422c-84c3-7d6ec6d2df6d", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3cad89a-3f03-46e7-9d74-b6bd0889ef31", "record_id": "flaws_cloudtrail:0000141:d3cad89a-3f03-46e7-9d74-b6bd0889ef31", "row_index": 141, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3cad89a-3f03-46e7-9d74-b6bd0889ef31", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cdf02d6-e1de-440d-9dd7-c3e3ba2fd3d7", "record_id": "flaws_cloudtrail:0000142:6cdf02d6-e1de-440d-9dd7-c3e3ba2fd3d7", "row_index": 142, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cdf02d6-e1de-440d-9dd7-c3e3ba2fd3d7", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f316910e-d2bb-4322-8160-633be91a82b9", "record_id": "flaws_cloudtrail:0000143:f316910e-d2bb-4322-8160-633be91a82b9", "row_index": 143, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f316910e-d2bb-4322-8160-633be91a82b9", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1555ced-8c8a-497e-a764-3905ebc8029b", "record_id": "flaws_cloudtrail:0000144:a1555ced-8c8a-497e-a764-3905ebc8029b", "row_index": 144, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1555ced-8c8a-497e-a764-3905ebc8029b", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e092902-6b5e-4cdb-b4fc-904a8bc02148", "record_id": "flaws_cloudtrail:0000145:0e092902-6b5e-4cdb-b4fc-904a8bc02148", "row_index": 145, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e092902-6b5e-4cdb-b4fc-904a8bc02148", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "540d72e1-4e05-4493-ab36-2dc54dc318e1", "record_id": "flaws_cloudtrail:0000146:540d72e1-4e05-4493-ab36-2dc54dc318e1", "row_index": 146, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "540d72e1-4e05-4493-ab36-2dc54dc318e1", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edabde6b-b31a-4bbd-b87c-1765435a7f58", "record_id": "flaws_cloudtrail:0000147:edabde6b-b31a-4bbd-b87c-1765435a7f58", "row_index": 147, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edabde6b-b31a-4bbd-b87c-1765435a7f58", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffe287b-720c-4400-8eb2-2886ea578fa1", "record_id": "flaws_cloudtrail:0000148:7ffe287b-720c-4400-8eb2-2886ea578fa1", "row_index": 148, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffe287b-720c-4400-8eb2-2886ea578fa1", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ae055520-5657-4bc4-a39d-bf0b3821f937", "record_id": "flaws_cloudtrail:0000149:5ae055520-5657-4bc4-a39d-bf0b3821f937", "row_index": 149, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ae055520-5657-4bc4-a39d-bf0b3821f937", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a240f496-2869-4271-ab64-8f8f30d9bc6e", "record_id": "flaws_cloudtrail:0000150:a240f496-2869-4271-ab64-8f8f30d9bc6e", "row_index": 150, "timestamp": "2019-07-08T15:44:22Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a240f496-2869-4271-ab64-8f8f30d9bc6e", "eventTime": "2019-07-08T15:44:22Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "106413e80-7351-4817-8ec2-e51abb29c468", "record_id": "flaws_cloudtrail:0000151:106413e80-7351-4817-8ec2-e51abb29c468", "row_index": 151, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "106413e80-7351-4817-8ec2-e51abb29c468", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fbed1c5-5582-4558-b9c1-82c154122eafa", "record_id": "flaws_cloudtrail:0000152:0fbed1c5-5582-4558-b9c1-82c154122eafa", "row_index": 152, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fbed1c5-5582-4558-b9c1-82c154122eafa", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e569aa7-423a-4c3e-9b49-19ec4f4499ed", "record_id": "flaws_cloudtrail:0000153:1e569aa7-423a-4c3e-9b49-19ec4f4499ed", "row_index": 153, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e569aa7-423a-4c3e-9b49-19ec4f4499ed", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59369caa-ae8a-492b-bf26-333c902e7851", "record_id": "flaws_cloudtrail:0000154:59369caa-ae8a-492b-bf26-333c902e7851", "row_index": 154, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59369caa-ae8a-492b-bf26-333c902e7851", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7328afd-de26-4786-be98-a088f157d6c3", "record_id": "flaws_cloudtrail:0000155:c7328afd-de26-4786-be98-a088f157d6c3", "row_index": 155, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7328afd-de26-4786-be98-a088f157d6c3", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71d22ae6-6854-45d5-ad96-f797b8c84297", "record_id": "flaws_cloudtrail:0000156:71d22ae6-6854-45d5-ad96-f797b8c84297", "row_index": 156, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71d22ae6-6854-45d5-ad96-f797b8c84297", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37fe2892-4310-4fa1-a010-21733ba9c16d", "record_id": "flaws_cloudtrail:0000157:37fe2892-4310-4fa1-a010-21733ba9c16d", "row_index": 157, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37fe2892-4310-4fa1-a010-21733ba9c16d", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6721f06-bf57-4c1e-8924-bc5b509901d6", "record_id": "flaws_cloudtrail:0000158:e6721f06-bf57-4c1e-8924-bc5b509901d6", "row_index": 158, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6721f06-bf57-4c1e-8924-bc5b509901d6", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893e029f-ac51-4253-9682-162e8d73f942", "record_id": "flaws_cloudtrail:0000159:893e029f-ac51-4253-9682-162e8d73f942", "row_index": 159, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893e029f-ac51-4253-9682-162e8d73f942", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab48fb5-baa9-4325-93e8-2f300a5d43a1", "record_id": "flaws_cloudtrail:0000160:6ab48fb5-baa9-4325-93e8-2f300a5d43a1", "row_index": 160, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab48fb5-baa9-4325-93e8-2f300a5d43a1", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06966-9962-44d4-ba8f-1ae97b0d1644", "record_id": "flaws_cloudtrail:0000161:a06966-9962-44d4-ba8f-1ae97b0d1644", "row_index": 161, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06966-9962-44d4-ba8f-1ae97b0d1644", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e4531d-4c7a-4b2b-9ca0-1aabb2f5b86e", "record_id": "flaws_cloudtrail:0000162:67e4531d-4c7a-4b2b-9ca0-1aabb2f5b86e", "row_index": 162, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e4531d-4c7a-4b2b-9ca0-1aabb2f5b86e", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3577a9a6-7e86-4987-a1c5-4b919af1a7ca", "record_id": "flaws_cloudtrail:0000163:3577a9a6-7e86-4987-a1c5-4b919af1a7ca", "row_index": 163, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3577a9a6-7e86-4987-a1c5-4b919af1a7ca", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "364a1922-b094-4ecb-9a5b-30b6a4e577f0", "record_id": "flaws_cloudtrail:0000164:364a1922-b094-4ecb-9a5b-30b6a4e577f0", "row_index": 164, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "364a1922-b094-4ecb-9a5b-30b6a4e577f0", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f17f56d-84bc-4dcf-8368-b99749aef6", "record_id": "flaws_cloudtrail:0000165:2f17f56d-84bc-4dcf-8368-b99749aef6", "row_index": 165, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f17f56d-84bc-4dcf-8368-b99749aef6", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b9eb736-ff3a-4c88-a300-4ca04fe753c0", "record_id": "flaws_cloudtrail:0000166:3b9eb736-ff3a-4c88-a300-4ca04fe753c0", "row_index": 166, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b9eb736-ff3a-4c88-a300-4ca04fe753c0", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b8c490a-4182-4161-815d-3ebb4e12d0bd", "record_id": "flaws_cloudtrail:0000167:9b8c490a-4182-4161-815d-3ebb4e12d0bd", "row_index": 167, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b8c490a-4182-4161-815d-3ebb4e12d0bd", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abf5937d-641e-4310-99de-2dc341aed5b9", "record_id": "flaws_cloudtrail:0000168:abf5937d-641e-4310-99de-2dc341aed5b9", "row_index": 168, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abf5937d-641e-4310-99de-2dc341aed5b9", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4c6a3ad-2608-4f81-9774-4ef49a6482cf", "record_id": "flaws_cloudtrail:0000169:c4c6a3ad-2608-4f81-9774-4ef49a6482cf", "row_index": 169, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4c6a3ad-2608-4f81-9774-4ef49a6482cf", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89640f0-9d7b-490d-bb6c-c27f2df21c6f", "record_id": "flaws_cloudtrail:0000170:d89640f0-9d7b-490d-bb6c-c27f2df21c6f", "row_index": 170, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89640f0-9d7b-490d-bb6c-c27f2df21c6f", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63705df-d9f5-45d8-b881-e6b6e7d9e5ee", "record_id": "flaws_cloudtrail:0000171:63705df-d9f5-45d8-b881-e6b6e7d9e5ee", "row_index": 171, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63705df-d9f5-45d8-b881-e6b6e7d9e5ee", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e64a909-5f19-469c-9db0-d65018ff8c5", "record_id": "flaws_cloudtrail:0000172:1e64a909-5f19-469c-9db0-d65018ff8c5", "row_index": 172, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e64a909-5f19-469c-9db0-d65018ff8c5", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "239271e5f-ba1f-49d1-a7a1-da52d51dc498", "record_id": "flaws_cloudtrail:0000173:239271e5f-ba1f-49d1-a7a1-da52d51dc498", "row_index": 173, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "239271e5f-ba1f-49d1-a7a1-da52d51dc498", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e152515a4-a413-4f7a-ad83-6e129d816dfe", "record_id": "flaws_cloudtrail:0000174:e152515a4-a413-4f7a-ad83-6e129d816dfe", "row_index": 174, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e152515a4-a413-4f7a-ad83-6e129d816dfe", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aff1239-f52d-40d6-8103-d84d25350", "record_id": "flaws_cloudtrail:0000175:6aff1239-f52d-40d6-8103-d84d25350", "row_index": 175, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aff1239-f52d-40d6-8103-d84d25350", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756218b54-f160-4246-a8e9-3a2fc1d6ed33", "record_id": "flaws_cloudtrail:0000176:756218b54-f160-4246-a8e9-3a2fc1d6ed33", "row_index": 176, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756218b54-f160-4246-a8e9-3a2fc1d6ed33", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0041f2f-ba56-49ee-a49c-0af465c907a4", "record_id": "flaws_cloudtrail:0000177:a0041f2f-ba56-49ee-a49c-0af465c907a4", "row_index": 177, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0041f2f-ba56-49ee-a49c-0af465c907a4", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d369d0c9-d98d-4024-a8ae-ddfd2d64dfe0", "record_id": "flaws_cloudtrail:0000178:d369d0c9-d98d-4024-a8ae-ddfd2d64dfe0", "row_index": 178, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d369d0c9-d98d-4024-a8ae-ddfd2d64dfe0", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "488bc75a-f4b5-436e-9034-8d323b988c2e", "record_id": "flaws_cloudtrail:0000179:488bc75a-f4b5-436e-9034-8d323b988c2e", "row_index": 179, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "488bc75a-f4b5-436e-9034-8d323b988c2e", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade9c625-129f-4eba-bb47-591042c871e44", "record_id": "flaws_cloudtrail:0000180:ade9c625-129f-4eba-bb47-591042c871e44", "row_index": 180, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade9c625-129f-4eba-bb47-591042c871e44", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89842fe-553b-432b-94a8-973486e45d3e", "record_id": "flaws_cloudtrail:0000181:89842fe-553b-432b-94a8-973486e45d3e", "row_index": 181, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89842fe-553b-432b-94a8-973486e45d3e", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04de670-d3b0-4740-a323-006ddc0cb15a", "record_id": "flaws_cloudtrail:0000182:e04de670-d3b0-4740-a323-006ddc0cb15a", "row_index": 182, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04de670-d3b0-4740-a323-006ddc0cb15a", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6c09bd-eda8-4e04-a21c-bf2abcc76338", "record_id": "flaws_cloudtrail:0000183:bd6c09bd-eda8-4e04-a21c-bf2abcc76338", "row_index": 183, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6c09bd-eda8-4e04-a21c-bf2abcc76338", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30d8f99-4042-427f-a21e-d77509436852", "record_id": "flaws_cloudtrail:0000184:e30d8f99-4042-427f-a21e-d77509436852", "row_index": 184, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30d8f99-4042-427f-a21e-d77509436852", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9031e7-cc65-403d-bff0-46c6d5f4c06f", "record_id": "flaws_cloudtrail:0000185:9d9031e7-cc65-403d-bff0-46c6d5f4c06f", "row_index": 185, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9031e7-cc65-403d-bff0-46c6d5f4c06f", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c046a58e-e47b-4cb7-aafb-139e80282e44", "record_id": "flaws_cloudtrail:0000186:c046a58e-e47b-4cb7-aafb-139e80282e44", "row_index": 186, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c046a58e-e47b-4cb7-aafb-139e80282e44", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d71a01f-47ad-4d9b-a938-61ce6711f4d9", "record_id": "flaws_cloudtrail:0000187:7d71a01f-47ad-4d9b-a938-61ce6711f4d9", "row_index": 187, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d71a01f-47ad-4d9b-a938-61ce6711f4d9", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69b19c77-f1e0-463c-87f3-af672eb6ad68", "record_id": "flaws_cloudtrail:0000188:69b19c77-f1e0-463c-87f3-af672eb6ad68", "row_index": 188, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69b19c77-f1e0-463c-87f3-af672eb6ad68", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1db531876-0579-4c63-996a-92657459ffed", "record_id": "flaws_cloudtrail:0000189:1db531876-0579-4c63-996a-92657459ffed", "row_index": 189, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1db531876-0579-4c63-996a-92657459ffed", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da2cfc14-33d8-4a70-acc4-679576ee123be", "record_id": "flaws_cloudtrail:0000190:da2cfc14-33d8-4a70-acc4-679576ee123be", "row_index": 190, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da2cfc14-33d8-4a70-acc4-679576ee123be", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "106413e80-7351-4817-8ec2-e51abb29c468", "record_id": "flaws_cloudtrail:0000191:106413e80-7351-4817-8ec2-e51abb29c468", "row_index": 191, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "106413e80-7351-4817-8ec2-e51abb29c468", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fbed1c5-5582-4558-b9c1-82c154122eafa", "record_id": "flaws_cloudtrail:0000192:0fbed1c5-5582-4558-b9c1-82c154122eafa", "row_index": 192, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fbed1c5-5582-4558-b9c1-82c154122eafa", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e569aa7-423a-4c3e-9b49-19ec4f4499ed", "record_id": "flaws_cloudtrail:0000193:1e569aa7-423a-4c3e-9b49-19ec4f4499ed", "row_index": 193, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e569aa7-423a-4c3e-9b49-19ec4f4499ed", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59369caa-ae8a-492b-bf26-333c902e7851", "record_id": "flaws_cloudtrail:0000194:59369caa-ae8a-492b-bf26-333c902e7851", "row_index": 194, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59369caa-ae8a-492b-bf26-333c902e7851", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7328afd-de26-4786-be98-a088f157d6c3", "record_id": "flaws_cloudtrail:0000195:c7328afd-de26-4786-be98-a088f157d6c3", "row_index": 195, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7328afd-de26-4786-be98-a088f157d6c3", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71d22ae6-6854-45d5-ad96-f797b8c84297", "record_id": "flaws_cloudtrail:0000196:71d22ae6-6854-45d5-ad96-f797b8c84297", "row_index": 196, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71d22ae6-6854-45d5-ad96-f797b8c84297", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37fe2892-4310-4fa1-a010-21733ba9c16d", "record_id": "flaws_cloudtrail:0000197:37fe2892-4310-4fa1-a010-21733ba9c16d", "row_index": 197, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37fe2892-4310-4fa1-a010-21733ba9c16d", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6721f06-bf57-4c1e-8924-bc5b509901d6", "record_id": "flaws_cloudtrail:0000198:e6721f06-bf57-4c1e-8924-bc5b509901d6", "row_index": 198, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6721f06-bf57-4c1e-8924-bc5b509901d6", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893e029f-ac51-4253-9682-162e8d73f942", "record_id": "flaws_cloudtrail:0000199:893e029f-ac51-4253-9682-162e8d73f942", "row_index": 199, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893e029f-ac51-4253-9682-162e8d73f942", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab48fb5-baa9-4325-93e8-2f300a5d43a1", "record_id": "flaws_cloudtrail:0000200:6ab48fb5-baa9-4325-93e8-2f300a5d43a1", "row_index": 200, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab48fb5-baa9-4325-93e8-2f300a5d43a1", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06966-9962-44d4-ba8f-1ae97b0d1644", "record_id": "flaws_cloudtrail:0000201:a06966-9962-44d4-ba8f-1ae97b0d1644", "row_index": 201, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06966-9962-44d4-ba8f-1ae97b0d1644", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e4531d-4c7a-4b2b-9ca0-1aabb2f5b86e", "record_id": "flaws_cloudtrail:0000202:67e4531d-4c7a-4b2b-9ca0-1aabb2f5b86e", "row_index": 202, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e4531d-4c7a-4b2b-9ca0-1aabb2f5b86e", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3577a9a6-7e86-4987-a1c5-4b919af1a7ca", "record_id": "flaws_cloudtrail:0000203:3577a9a6-7e86-4987-a1c5-4b919af1a7ca", "row_index": 203, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3577a9a6-7e86-4987-a1c5-4b919af1a7ca", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "364a1922-b094-4ecb-9a5b-30b6a4e577f0", "record_id": "flaws_cloudtrail:0000204:364a1922-b094-4ecb-9a5b-30b6a4e577f0", "row_index": 204, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "364a1922-b094-4ecb-9a5b-30b6a4e577f0", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f17f56d-84bc-4dcf-8368-b99749aef6", "record_id": "flaws_cloudtrail:0000205:2f17f56d-84bc-4dcf-8368-b99749aef6", "row_index": 205, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f17f56d-84bc-4dcf-8368-b99749aef6", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b9eb736-ff3a-4c88-a300-4ca04fe753c0", "record_id": "flaws_cloudtrail:0000206:3b9eb736-ff3a-4c88-a300-4ca04fe753c0", "row_index": 206, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b9eb736-ff3a-4c88-a300-4ca04fe753c0", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b8c490a-4182-4161-815d-3ebb4e12d0bd", "record_id": "flaws_cloudtrail:0000207:9b8c490a-4182-4161-815d-3ebb4e12d0bd", "row_index": 207, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b8c490a-4182-4161-815d-3ebb4e12d0bd", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abf5937d-641e-4310-99de-2dc341aed5b9", "record_id": "flaws_cloudtrail:0000208:abf5937d-641e-4310-99de-2dc341aed5b9", "row_index": 208, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abf5937d-641e-4310-99de-2dc341aed5b9", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4c6a3ad-2608-4f81-9774-4ef49a6482cf", "record_id": "flaws_cloudtrail:0000209:c4c6a3ad-2608-4f81-9774-4ef49a6482cf", "row_index": 209, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4c6a3ad-2608-4f81-9774-4ef49a6482cf", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89640f0-9d7b-490d-bb6c-c27f2df21c6f", "record_id": "flaws_cloudtrail:0000210:d89640f0-9d7b-490d-bb6c-c27f2df21c6f", "row_index": 210, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89640f0-9d7b-490d-bb6c-c27f2df21c6f", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63705df-d9f5-45d8-b881-e6b6e7d9e5ee", "record_id": "flaws_cloudtrail:0000211:63705df-d9f5-45d8-b881-e6b6e7d9e5ee", "row_index": 211, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63705df-d9f5-45d8-b881-e6b6e7d9e5ee", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e64a909-5f19-469c-9db0-d65018ff8c5", "record_id": "flaws_cloudtrail:0000212:1e64a909-5f19-469c-9db0-d65018ff8c5", "row_index": 212, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e64a909-5f19-469c-9db0-d65018ff8c5", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "239271e5f-ba1f-49d1-a7a1-da52d51dc498", "record_id": "flaws_cloudtrail:0000213:239271e5f-ba1f-49d1-a7a1-da52d51dc498", "row_index": 213, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "239271e5f-ba1f-49d1-a7a1-da52d51dc498", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e152515a4-a413-4f7a-ad83-6e129d816dfe", "record_id": "flaws_cloudtrail:0000214:e152515a4-a413-4f7a-ad83-6e129d816dfe", "row_index": 214, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e152515a4-a413-4f7a-ad83-6e129d816dfe", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aff1239-f52d-40d6-8103-d84d25350", "record_id": "flaws_cloudtrail:0000215:6aff1239-f52d-40d6-8103-d84d25350", "row_index": 215, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aff1239-f52d-40d6-8103-d84d25350", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756218b54-f160-4246-a8e9-3a2fc1d6ed33", "record_id": "flaws_cloudtrail:0000216:756218b54-f160-4246-a8e9-3a2fc1d6ed33", "row_index": 216, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756218b54-f160-4246-a8e9-3a2fc1d6ed33", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0041f2f-ba56-49ee-a49c-0af465c907a4", "record_id": "flaws_cloudtrail:0000217:a0041f2f-ba56-49ee-a49c-0af465c907a4", "row_index": 217, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0041f2f-ba56-49ee-a49c-0af465c907a4", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d369d0c9-d98d-4024-a8ae-ddfd2d64dfe0", "record_id": "flaws_cloudtrail:0000218:d369d0c9-d98d-4024-a8ae-ddfd2d64dfe0", "row_index": 218, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d369d0c9-d98d-4024-a8ae-ddfd2d64dfe0", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "488bc75a-f4b5-436e-9034-8d323b988c2e", "record_id": "flaws_cloudtrail:0000219:488bc75a-f4b5-436e-9034-8d323b988c2e", "row_index": 219, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "488bc75a-f4b5-436e-9034-8d323b988c2e", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade9c625-129f-4eba-bb47-591042c871e44", "record_id": "flaws_cloudtrail:0000220:ade9c625-129f-4eba-bb47-591042c871e44", "row_index": 220, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade9c625-129f-4eba-bb47-591042c871e44", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89842fe-553b-432b-94a8-973486e45d3e", "record_id": "flaws_cloudtrail:0000221:89842fe-553b-432b-94a8-973486e45d3e", "row_index": 221, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89842fe-553b-432b-94a8-973486e45d3e", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04de670-d3b0-4740-a323-006ddc0cb15a", "record_id": "flaws_cloudtrail:0000222:e04de670-d3b0-4740-a323-006ddc0cb15a", "row_index": 222, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04de670-d3b0-4740-a323-006ddc0cb15a", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6c09bd-eda8-4e04-a21c-bf2abcc76338", "record_id": "flaws_cloudtrail:0000223:bd6c09bd-eda8-4e04-a21c-bf2abcc76338", "row_index": 223, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6c09bd-eda8-4e04-a21c-bf2abcc76338", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30d8f99-4042-427f-a21e-d77509436852", "record_id": "flaws_cloudtrail:0000224:e30d8f99-4042-427f-a21e-d77509436852", "row_index": 224, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30d8f99-4042-427f-a21e-d77509436852", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9031e7-cc65-403d-bff0-46c6d5f4c06f", "record_id": "flaws_cloudtrail:0000225:9d9031e7-cc65-403d-bff0-46c6d5f4c06f", "row_index": 225, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9031e7-cc65-403d-bff0-46c6d5f4c06f", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c046a58e-e47b-4cb7-aafb-139e80282e44", "record_id": "flaws_cloudtrail:0000226:c046a58e-e47b-4cb7-aafb-139e80282e44", "row_index": 226, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c046a58e-e47b-4cb7-aafb-139e80282e44", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d71a01f-47ad-4d9b-a938-61ce6711f4d9", "record_id": "flaws_cloudtrail:0000227:7d71a01f-47ad-4d9b-a938-61ce6711f4d9", "row_index": 227, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d71a01f-47ad-4d9b-a938-61ce6711f4d9", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69b19c77-f1e0-463c-87f3-af672eb6ad68", "record_id": "flaws_cloudtrail:0000228:69b19c77-f1e0-463c-87f3-af672eb6ad68", "row_index": 228, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69b19c77-f1e0-463c-87f3-af672eb6ad68", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1db531876-0579-4c63-996a-92657459ffed", "record_id": "flaws_cloudtrail:0000229:1db531876-0579-4c63-996a-92657459ffed", "row_index": 229, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1db531876-0579-4c63-996a-92657459ffed", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da2cfc14-33d8-4a70-acc4-679576ee123be", "record_id": "flaws_cloudtrail:0000230:da2cfc14-33d8-4a70-acc4-679576ee123be", "row_index": 230, "timestamp": "2019-07-08T15:44:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da2cfc14-33d8-4a70-acc4-679576ee123be", "eventTime": "2019-07-08T15:44:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "869930b89-c4c2-4cfe-b074-329abdb2a6c1", "record_id": "flaws_cloudtrail:0000231:869930b89-c4c2-4cfe-b074-329abdb2a6c1", "row_index": 231, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "869930b89-c4c2-4cfe-b074-329abdb2a6c1", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60791a3-76e7-4a62-b4e5-383338d25ecc", "record_id": "flaws_cloudtrail:0000232:60791a3-76e7-4a62-b4e5-383338d25ecc", "row_index": 232, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60791a3-76e7-4a62-b4e5-383338d25ecc", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95ee8f2-bad8-485a-89d8-6ac23be714862", "record_id": "flaws_cloudtrail:0000233:c95ee8f2-bad8-485a-89d8-6ac23be714862", "row_index": 233, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95ee8f2-bad8-485a-89d8-6ac23be714862", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90eedf8a-ebe7-4452-8b53-38ae54424af", "record_id": "flaws_cloudtrail:0000234:90eedf8a-ebe7-4452-8b53-38ae54424af", "row_index": 234, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90eedf8a-ebe7-4452-8b53-38ae54424af", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605c776a-867b-443b-b37e-d71e24339a82", "record_id": "flaws_cloudtrail:0000235:605c776a-867b-443b-b37e-d71e24339a82", "row_index": 235, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605c776a-867b-443b-b37e-d71e24339a82", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21966c23-6115-41cb-b05a-ed80457a7945", "record_id": "flaws_cloudtrail:0000236:21966c23-6115-41cb-b05a-ed80457a7945", "row_index": 236, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21966c23-6115-41cb-b05a-ed80457a7945", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3873b38a-d54a-4142-b279-b918a76166", "record_id": "flaws_cloudtrail:0000237:3873b38a-d54a-4142-b279-b918a76166", "row_index": 237, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3873b38a-d54a-4142-b279-b918a76166", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df4a180-a73f-4454-83da-c84fe0c3a4d2", "record_id": "flaws_cloudtrail:0000238:2df4a180-a73f-4454-83da-c84fe0c3a4d2", "row_index": 238, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df4a180-a73f-4454-83da-c84fe0c3a4d2", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15496e9f-8e6b-4a64-ac15-358f5baf4c7c", "record_id": "flaws_cloudtrail:0000239:15496e9f-8e6b-4a64-ac15-358f5baf4c7c", "row_index": 239, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15496e9f-8e6b-4a64-ac15-358f5baf4c7c", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a65b9a98-73fe-447d-a8fa-1dc4d33972d1", "record_id": "flaws_cloudtrail:0000240:a65b9a98-73fe-447d-a8fa-1dc4d33972d1", "row_index": 240, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a65b9a98-73fe-447d-a8fa-1dc4d33972d1", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ec73ff0-f8bc-470e-8b6e-3be040737552", "record_id": "flaws_cloudtrail:0000241:7ec73ff0-f8bc-470e-8b6e-3be040737552", "row_index": 241, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ec73ff0-f8bc-470e-8b6e-3be040737552", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1417cfd7-82cc-4861-8874-783a1565c88e", "record_id": "flaws_cloudtrail:0000242:1417cfd7-82cc-4861-8874-783a1565c88e", "row_index": 242, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1417cfd7-82cc-4861-8874-783a1565c88e", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d18c81-3954-4219-a138-b8597c3bae83", "record_id": "flaws_cloudtrail:0000243:51d18c81-3954-4219-a138-b8597c3bae83", "row_index": 243, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d18c81-3954-4219-a138-b8597c3bae83", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49871e-faf7-4255-bfa1-2b169470d9715", "record_id": "flaws_cloudtrail:0000244:49871e-faf7-4255-bfa1-2b169470d9715", "row_index": 244, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49871e-faf7-4255-bfa1-2b169470d9715", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400ef049-2ed6-426a-a5a5-3b4e186df125", "record_id": "flaws_cloudtrail:0000245:400ef049-2ed6-426a-a5a5-3b4e186df125", "row_index": 245, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400ef049-2ed6-426a-a5a5-3b4e186df125", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "869930b89-c4c2-4cfe-b074-329abdb2a6c1", "record_id": "flaws_cloudtrail:0000246:869930b89-c4c2-4cfe-b074-329abdb2a6c1", "row_index": 246, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "869930b89-c4c2-4cfe-b074-329abdb2a6c1", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60791a3-76e7-4a62-b4e5-383338d25ecc", "record_id": "flaws_cloudtrail:0000247:60791a3-76e7-4a62-b4e5-383338d25ecc", "row_index": 247, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60791a3-76e7-4a62-b4e5-383338d25ecc", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95ee8f2-bad8-485a-89d8-6ac23be714862", "record_id": "flaws_cloudtrail:0000248:c95ee8f2-bad8-485a-89d8-6ac23be714862", "row_index": 248, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95ee8f2-bad8-485a-89d8-6ac23be714862", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90eedf8a-ebe7-4452-8b53-38ae54424af", "record_id": "flaws_cloudtrail:0000249:90eedf8a-ebe7-4452-8b53-38ae54424af", "row_index": 249, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90eedf8a-ebe7-4452-8b53-38ae54424af", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605c776a-867b-443b-b37e-d71e24339a82", "record_id": "flaws_cloudtrail:0000250:605c776a-867b-443b-b37e-d71e24339a82", "row_index": 250, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605c776a-867b-443b-b37e-d71e24339a82", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21966c23-6115-41cb-b05a-ed80457a7945", "record_id": "flaws_cloudtrail:0000251:21966c23-6115-41cb-b05a-ed80457a7945", "row_index": 251, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21966c23-6115-41cb-b05a-ed80457a7945", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3873b38a-d54a-4142-b279-b918a76166", "record_id": "flaws_cloudtrail:0000252:3873b38a-d54a-4142-b279-b918a76166", "row_index": 252, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3873b38a-d54a-4142-b279-b918a76166", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df4a180-a73f-4454-83da-c84fe0c3a4d2", "record_id": "flaws_cloudtrail:0000253:2df4a180-a73f-4454-83da-c84fe0c3a4d2", "row_index": 253, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df4a180-a73f-4454-83da-c84fe0c3a4d2", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15496e9f-8e6b-4a64-ac15-358f5baf4c7c", "record_id": "flaws_cloudtrail:0000254:15496e9f-8e6b-4a64-ac15-358f5baf4c7c", "row_index": 254, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15496e9f-8e6b-4a64-ac15-358f5baf4c7c", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a65b9a98-73fe-447d-a8fa-1dc4d33972d1", "record_id": "flaws_cloudtrail:0000255:a65b9a98-73fe-447d-a8fa-1dc4d33972d1", "row_index": 255, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a65b9a98-73fe-447d-a8fa-1dc4d33972d1", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ec73ff0-f8bc-470e-8b6e-3be040737552", "record_id": "flaws_cloudtrail:0000256:7ec73ff0-f8bc-470e-8b6e-3be040737552", "row_index": 256, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ec73ff0-f8bc-470e-8b6e-3be040737552", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1417cfd7-82cc-4861-8874-783a1565c88e", "record_id": "flaws_cloudtrail:0000257:1417cfd7-82cc-4861-8874-783a1565c88e", "row_index": 257, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1417cfd7-82cc-4861-8874-783a1565c88e", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d18c81-3954-4219-a138-b8597c3bae83", "record_id": "flaws_cloudtrail:0000258:51d18c81-3954-4219-a138-b8597c3bae83", "row_index": 258, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d18c81-3954-4219-a138-b8597c3bae83", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49871e-faf7-4255-bfa1-2b169470d9715", "record_id": "flaws_cloudtrail:0000259:49871e-faf7-4255-bfa1-2b169470d9715", "row_index": 259, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49871e-faf7-4255-bfa1-2b169470d9715", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400ef049-2ed6-426a-a5a5-3b4e186df125", "record_id": "flaws_cloudtrail:0000260:400ef049-2ed6-426a-a5a5-3b4e186df125", "row_index": 260, "timestamp": "2019-07-08T15:44:24Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400ef049-2ed6-426a-a5a5-3b4e186df125", "eventTime": "2019-07-08T15:44:24Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c3885d6-2a9b-4e60-a5c7-1eba2a4a3c2b", "record_id": "flaws_cloudtrail:0000261:3c3885d6-2a9b-4e60-a5c7-1eba2a4a3c2b", "row_index": 261, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c3885d6-2a9b-4e60-a5c7-1eba2a4a3c2b", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ebc043-bb4b-4569-b3bf-c210397e3710", "record_id": "flaws_cloudtrail:0000262:77ebc043-bb4b-4569-b3bf-c210397e3710", "row_index": 262, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ebc043-bb4b-4569-b3bf-c210397e3710", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7cbb943-3db7-4626-bec7-7eaad052f13a", "record_id": "flaws_cloudtrail:0000263:c7cbb943-3db7-4626-bec7-7eaad052f13a", "row_index": 263, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7cbb943-3db7-4626-bec7-7eaad052f13a", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83220dad-23bd-4228-9f9f-6b9731ec60d7", "record_id": "flaws_cloudtrail:0000264:83220dad-23bd-4228-9f9f-6b9731ec60d7", "row_index": 264, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83220dad-23bd-4228-9f9f-6b9731ec60d7", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2e6072-9175-46d5-b614-a681ae72dc67", "record_id": "flaws_cloudtrail:0000265:5d2e6072-9175-46d5-b614-a681ae72dc67", "row_index": 265, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2e6072-9175-46d5-b614-a681ae72dc67", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2bde25-d305-4c1f-a176-ba1139d7072b", "record_id": "flaws_cloudtrail:0000266:ed2bde25-d305-4c1f-a176-ba1139d7072b", "row_index": 266, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2bde25-d305-4c1f-a176-ba1139d7072b", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a51a553-59de-40fe-8443-2cceb423ab47", "record_id": "flaws_cloudtrail:0000267:4a51a553-59de-40fe-8443-2cceb423ab47", "row_index": 267, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a51a553-59de-40fe-8443-2cceb423ab47", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1313b892-c63d-43e2-ab5d-398346256976", "record_id": "flaws_cloudtrail:0000268:1313b892-c63d-43e2-ab5d-398346256976", "row_index": 268, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1313b892-c63d-43e2-ab5d-398346256976", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae70034-90eb-47ce-aa38-88357a8d781a", "record_id": "flaws_cloudtrail:0000269:3ae70034-90eb-47ce-aa38-88357a8d781a", "row_index": 269, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae70034-90eb-47ce-aa38-88357a8d781a", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deef88e6-c334-4bc1-9122-f6ee7f04730b", "record_id": "flaws_cloudtrail:0000270:deef88e6-c334-4bc1-9122-f6ee7f04730b", "row_index": 270, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deef88e6-c334-4bc1-9122-f6ee7f04730b", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "990a7d69-512a-4466-9a16-3daf38f67401", "record_id": "flaws_cloudtrail:0000271:990a7d69-512a-4466-9a16-3daf38f67401", "row_index": 271, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "990a7d69-512a-4466-9a16-3daf38f67401", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eabbd942-7c84-4409-8af1-61efc99914", "record_id": "flaws_cloudtrail:0000272:eabbd942-7c84-4409-8af1-61efc99914", "row_index": 272, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eabbd942-7c84-4409-8af1-61efc99914", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e9b4b0-5394-4db8-8fc6-75b18674a81", "record_id": "flaws_cloudtrail:0000273:56e9b4b0-5394-4db8-8fc6-75b18674a81", "row_index": 273, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e9b4b0-5394-4db8-8fc6-75b18674a81", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c3885d6-2a9b-4e60-a5c7-1eba2a4a3c2b", "record_id": "flaws_cloudtrail:0000274:3c3885d6-2a9b-4e60-a5c7-1eba2a4a3c2b", "row_index": 274, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c3885d6-2a9b-4e60-a5c7-1eba2a4a3c2b", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ebc043-bb4b-4569-b3bf-c210397e3710", "record_id": "flaws_cloudtrail:0000275:77ebc043-bb4b-4569-b3bf-c210397e3710", "row_index": 275, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ebc043-bb4b-4569-b3bf-c210397e3710", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7cbb943-3db7-4626-bec7-7eaad052f13a", "record_id": "flaws_cloudtrail:0000276:c7cbb943-3db7-4626-bec7-7eaad052f13a", "row_index": 276, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7cbb943-3db7-4626-bec7-7eaad052f13a", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83220dad-23bd-4228-9f9f-6b9731ec60d7", "record_id": "flaws_cloudtrail:0000277:83220dad-23bd-4228-9f9f-6b9731ec60d7", "row_index": 277, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83220dad-23bd-4228-9f9f-6b9731ec60d7", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2e6072-9175-46d5-b614-a681ae72dc67", "record_id": "flaws_cloudtrail:0000278:5d2e6072-9175-46d5-b614-a681ae72dc67", "row_index": 278, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2e6072-9175-46d5-b614-a681ae72dc67", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2bde25-d305-4c1f-a176-ba1139d7072b", "record_id": "flaws_cloudtrail:0000279:ed2bde25-d305-4c1f-a176-ba1139d7072b", "row_index": 279, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2bde25-d305-4c1f-a176-ba1139d7072b", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a51a553-59de-40fe-8443-2cceb423ab47", "record_id": "flaws_cloudtrail:0000280:4a51a553-59de-40fe-8443-2cceb423ab47", "row_index": 280, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a51a553-59de-40fe-8443-2cceb423ab47", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1313b892-c63d-43e2-ab5d-398346256976", "record_id": "flaws_cloudtrail:0000281:1313b892-c63d-43e2-ab5d-398346256976", "row_index": 281, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1313b892-c63d-43e2-ab5d-398346256976", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ae70034-90eb-47ce-aa38-88357a8d781a", "record_id": "flaws_cloudtrail:0000282:3ae70034-90eb-47ce-aa38-88357a8d781a", "row_index": 282, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ae70034-90eb-47ce-aa38-88357a8d781a", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deef88e6-c334-4bc1-9122-f6ee7f04730b", "record_id": "flaws_cloudtrail:0000283:deef88e6-c334-4bc1-9122-f6ee7f04730b", "row_index": 283, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deef88e6-c334-4bc1-9122-f6ee7f04730b", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "990a7d69-512a-4466-9a16-3daf38f67401", "record_id": "flaws_cloudtrail:0000284:990a7d69-512a-4466-9a16-3daf38f67401", "row_index": 284, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "990a7d69-512a-4466-9a16-3daf38f67401", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eabbd942-7c84-4409-8af1-61efc99914", "record_id": "flaws_cloudtrail:0000285:eabbd942-7c84-4409-8af1-61efc99914", "row_index": 285, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eabbd942-7c84-4409-8af1-61efc99914", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e9b4b0-5394-4db8-8fc6-75b18674a81", "record_id": "flaws_cloudtrail:0000286:56e9b4b0-5394-4db8-8fc6-75b18674a81", "row_index": 286, "timestamp": "2019-07-08T15:44:25Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e9b4b0-5394-4db8-8fc6-75b18674a81", "eventTime": "2019-07-08T15:44:25Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68a6ec8c-dd71-4e2e-bac3-949c280febb1", "record_id": "flaws_cloudtrail:0000287:68a6ec8c-dd71-4e2e-bac3-949c280febb1", "row_index": 287, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68a6ec8c-dd71-4e2e-bac3-949c280febb1", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06017d8-5dd0-4d1f-b6bc-3945308753b7", "record_id": "flaws_cloudtrail:0000288:06017d8-5dd0-4d1f-b6bc-3945308753b7", "row_index": 288, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06017d8-5dd0-4d1f-b6bc-3945308753b7", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39381da9-083f-41a3-a01d-6fa86f674920", "record_id": "flaws_cloudtrail:0000289:39381da9-083f-41a3-a01d-6fa86f674920", "row_index": 289, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39381da9-083f-41a3-a01d-6fa86f674920", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69d70bc3-2aad-46f3-a53d-28d12fc4f089", "record_id": "flaws_cloudtrail:0000290:69d70bc3-2aad-46f3-a53d-28d12fc4f089", "row_index": 290, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69d70bc3-2aad-46f3-a53d-28d12fc4f089", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55d2e02e-1416-4c6b-85ca-abdddb8e93f0", "record_id": "flaws_cloudtrail:0000291:55d2e02e-1416-4c6b-85ca-abdddb8e93f0", "row_index": 291, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55d2e02e-1416-4c6b-85ca-abdddb8e93f0", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f054936dc-a212-4c86-be3c-27f591880fa7", "record_id": "flaws_cloudtrail:0000292:f054936dc-a212-4c86-be3c-27f591880fa7", "row_index": 292, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f054936dc-a212-4c86-be3c-27f591880fa7", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e17078-df83-45c9-adf8-b4e3b91f1410", "record_id": "flaws_cloudtrail:0000293:e5e17078-df83-45c9-adf8-b4e3b91f1410", "row_index": 293, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e17078-df83-45c9-adf8-b4e3b91f1410", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36f9f316-a442-4306-a923-91ff6e5fbb1b", "record_id": "flaws_cloudtrail:0000294:36f9f316-a442-4306-a923-91ff6e5fbb1b", "row_index": 294, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36f9f316-a442-4306-a923-91ff6e5fbb1b", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "630698a-65ba-45bf-a70c-484a4e30c042", "record_id": "flaws_cloudtrail:0000295:630698a-65ba-45bf-a70c-484a4e30c042", "row_index": 295, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "630698a-65ba-45bf-a70c-484a4e30c042", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0a7b0e-a522-4dad-83c9-881373ad", "record_id": "flaws_cloudtrail:0000296:fa0a7b0e-a522-4dad-83c9-881373ad", "row_index": 296, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0a7b0e-a522-4dad-83c9-881373ad", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45e1863a-30bb-4659-9041-d181fff0a049", "record_id": "flaws_cloudtrail:0000297:45e1863a-30bb-4659-9041-d181fff0a049", "row_index": 297, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45e1863a-30bb-4659-9041-d181fff0a049", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e5b3de-0b04-4cd6-930e-937795900530", "record_id": "flaws_cloudtrail:0000298:c9e5b3de-0b04-4cd6-930e-937795900530", "row_index": 298, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e5b3de-0b04-4cd6-930e-937795900530", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e77c680-713f-4c80-a098-a701e76bfd7b", "record_id": "flaws_cloudtrail:0000299:0e77c680-713f-4c80-a098-a701e76bfd7b", "row_index": 299, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e77c680-713f-4c80-a098-a701e76bfd7b", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68a6ec8c-dd71-4e2e-bac3-949c280febb1", "record_id": "flaws_cloudtrail:0000300:68a6ec8c-dd71-4e2e-bac3-949c280febb1", "row_index": 300, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68a6ec8c-dd71-4e2e-bac3-949c280febb1", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06017d8-5dd0-4d1f-b6bc-3945308753b7", "record_id": "flaws_cloudtrail:0000301:06017d8-5dd0-4d1f-b6bc-3945308753b7", "row_index": 301, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06017d8-5dd0-4d1f-b6bc-3945308753b7", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39381da9-083f-41a3-a01d-6fa86f674920", "record_id": "flaws_cloudtrail:0000302:39381da9-083f-41a3-a01d-6fa86f674920", "row_index": 302, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39381da9-083f-41a3-a01d-6fa86f674920", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69d70bc3-2aad-46f3-a53d-28d12fc4f089", "record_id": "flaws_cloudtrail:0000303:69d70bc3-2aad-46f3-a53d-28d12fc4f089", "row_index": 303, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69d70bc3-2aad-46f3-a53d-28d12fc4f089", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55d2e02e-1416-4c6b-85ca-abdddb8e93f0", "record_id": "flaws_cloudtrail:0000304:55d2e02e-1416-4c6b-85ca-abdddb8e93f0", "row_index": 304, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55d2e02e-1416-4c6b-85ca-abdddb8e93f0", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f054936dc-a212-4c86-be3c-27f591880fa7", "record_id": "flaws_cloudtrail:0000305:f054936dc-a212-4c86-be3c-27f591880fa7", "row_index": 305, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f054936dc-a212-4c86-be3c-27f591880fa7", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e17078-df83-45c9-adf8-b4e3b91f1410", "record_id": "flaws_cloudtrail:0000306:e5e17078-df83-45c9-adf8-b4e3b91f1410", "row_index": 306, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e17078-df83-45c9-adf8-b4e3b91f1410", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36f9f316-a442-4306-a923-91ff6e5fbb1b", "record_id": "flaws_cloudtrail:0000307:36f9f316-a442-4306-a923-91ff6e5fbb1b", "row_index": 307, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36f9f316-a442-4306-a923-91ff6e5fbb1b", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "630698a-65ba-45bf-a70c-484a4e30c042", "record_id": "flaws_cloudtrail:0000308:630698a-65ba-45bf-a70c-484a4e30c042", "row_index": 308, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "630698a-65ba-45bf-a70c-484a4e30c042", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0a7b0e-a522-4dad-83c9-881373ad", "record_id": "flaws_cloudtrail:0000309:fa0a7b0e-a522-4dad-83c9-881373ad", "row_index": 309, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0a7b0e-a522-4dad-83c9-881373ad", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45e1863a-30bb-4659-9041-d181fff0a049", "record_id": "flaws_cloudtrail:0000310:45e1863a-30bb-4659-9041-d181fff0a049", "row_index": 310, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45e1863a-30bb-4659-9041-d181fff0a049", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e5b3de-0b04-4cd6-930e-937795900530", "record_id": "flaws_cloudtrail:0000311:c9e5b3de-0b04-4cd6-930e-937795900530", "row_index": 311, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e5b3de-0b04-4cd6-930e-937795900530", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e77c680-713f-4c80-a098-a701e76bfd7b", "record_id": "flaws_cloudtrail:0000312:0e77c680-713f-4c80-a098-a701e76bfd7b", "row_index": 312, "timestamp": "2019-07-08T15:44:26Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e77c680-713f-4c80-a098-a701e76bfd7b", "eventTime": "2019-07-08T15:44:26Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b972e5a0-4b8c-4092-9de9-90b557b414ae", "record_id": "flaws_cloudtrail:0000313:b972e5a0-4b8c-4092-9de9-90b557b414ae", "row_index": 313, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b972e5a0-4b8c-4092-9de9-90b557b414ae", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab8ec1b5-e8d6-4e31-a000-2e5f3108c3a7", "record_id": "flaws_cloudtrail:0000314:ab8ec1b5-e8d6-4e31-a000-2e5f3108c3a7", "row_index": 314, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab8ec1b5-e8d6-4e31-a000-2e5f3108c3a7", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68473c0-61ab-41a7-be2a-1c1d0de09335", "record_id": "flaws_cloudtrail:0000315:68473c0-61ab-41a7-be2a-1c1d0de09335", "row_index": 315, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68473c0-61ab-41a7-be2a-1c1d0de09335", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c180392-f8ed-4a52-bd70-9f3b3d2fa351", "record_id": "flaws_cloudtrail:0000316:2c180392-f8ed-4a52-bd70-9f3b3d2fa351", "row_index": 316, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c180392-f8ed-4a52-bd70-9f3b3d2fa351", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c759404-b05c-4896-abb1-5960b252351bf", "record_id": "flaws_cloudtrail:0000317:c759404-b05c-4896-abb1-5960b252351bf", "row_index": 317, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c759404-b05c-4896-abb1-5960b252351bf", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "482544c-841f-4e80-a0ec-5e6104d20c58", "record_id": "flaws_cloudtrail:0000318:482544c-841f-4e80-a0ec-5e6104d20c58", "row_index": 318, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "482544c-841f-4e80-a0ec-5e6104d20c58", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c85e74f-6492-480c-ae45-e99b5d6c98e6", "record_id": "flaws_cloudtrail:0000319:3c85e74f-6492-480c-ae45-e99b5d6c98e6", "row_index": 319, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c85e74f-6492-480c-ae45-e99b5d6c98e6", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e22cd0-d80e-48fe-a1df-d0457cffae28", "record_id": "flaws_cloudtrail:0000320:f4e22cd0-d80e-48fe-a1df-d0457cffae28", "row_index": 320, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e22cd0-d80e-48fe-a1df-d0457cffae28", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79feb77d-5bc3-4dbf-9e45-05b2df1ca32b", "record_id": "flaws_cloudtrail:0000321:79feb77d-5bc3-4dbf-9e45-05b2df1ca32b", "row_index": 321, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79feb77d-5bc3-4dbf-9e45-05b2df1ca32b", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ec3a8d-23a0-465b-8e57-562e2de6f69f", "record_id": "flaws_cloudtrail:0000322:01ec3a8d-23a0-465b-8e57-562e2de6f69f", "row_index": 322, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ec3a8d-23a0-465b-8e57-562e2de6f69f", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14574bc-c70b-4332-82a3-c88b72f8701a", "record_id": "flaws_cloudtrail:0000323:14574bc-c70b-4332-82a3-c88b72f8701a", "row_index": 323, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14574bc-c70b-4332-82a3-c88b72f8701a", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd471153-381d-4ca0-ba81-dd3a5bb4d2d4", "record_id": "flaws_cloudtrail:0000324:bd471153-381d-4ca0-ba81-dd3a5bb4d2d4", "row_index": 324, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd471153-381d-4ca0-ba81-dd3a5bb4d2d4", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d51d1566-ac6f-4c47-856a-b164d33a4ea0", "record_id": "flaws_cloudtrail:0000325:d51d1566-ac6f-4c47-856a-b164d33a4ea0", "row_index": 325, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d51d1566-ac6f-4c47-856a-b164d33a4ea0", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d590484d-c657-4653-acd8-8cfb2a74d5b7", "record_id": "flaws_cloudtrail:0000326:d590484d-c657-4653-acd8-8cfb2a74d5b7", "row_index": 326, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d590484d-c657-4653-acd8-8cfb2a74d5b7", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b6d39f-97bf-4632-88f9-d818bc186a99", "record_id": "flaws_cloudtrail:0000327:54b6d39f-97bf-4632-88f9-d818bc186a99", "row_index": 327, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b6d39f-97bf-4632-88f9-d818bc186a99", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cda2639a-699f-4e6c-bfe3-226fd111947", "record_id": "flaws_cloudtrail:0000328:cda2639a-699f-4e6c-bfe3-226fd111947", "row_index": 328, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cda2639a-699f-4e6c-bfe3-226fd111947", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cf0112-0b39-41e0-8cb0-07a325295d", "record_id": "flaws_cloudtrail:0000329:28cf0112-0b39-41e0-8cb0-07a325295d", "row_index": 329, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cf0112-0b39-41e0-8cb0-07a325295d", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51feb999-d90e-49eb-884a-fca351972bbb", "record_id": "flaws_cloudtrail:0000330:51feb999-d90e-49eb-884a-fca351972bbb", "row_index": 330, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51feb999-d90e-49eb-884a-fca351972bbb", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3fd4c5b-3587-4780-befc-a275ef7f5ae3", "record_id": "flaws_cloudtrail:0000331:c3fd4c5b-3587-4780-befc-a275ef7f5ae3", "row_index": 331, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3fd4c5b-3587-4780-befc-a275ef7f5ae3", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5faabac-2692-4e57-a7ae-f31b21670f9e", "record_id": "flaws_cloudtrail:0000332:f5faabac-2692-4e57-a7ae-f31b21670f9e", "row_index": 332, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5faabac-2692-4e57-a7ae-f31b21670f9e", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1f4b05e-0a8e-4ef4-9c85-f62f09379d", "record_id": "flaws_cloudtrail:0000333:d1f4b05e-0a8e-4ef4-9c85-f62f09379d", "row_index": 333, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1f4b05e-0a8e-4ef4-9c85-f62f09379d", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b972e5a0-4b8c-4092-9de9-90b557b414ae", "record_id": "flaws_cloudtrail:0000334:b972e5a0-4b8c-4092-9de9-90b557b414ae", "row_index": 334, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b972e5a0-4b8c-4092-9de9-90b557b414ae", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab8ec1b5-e8d6-4e31-a000-2e5f3108c3a7", "record_id": "flaws_cloudtrail:0000335:ab8ec1b5-e8d6-4e31-a000-2e5f3108c3a7", "row_index": 335, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab8ec1b5-e8d6-4e31-a000-2e5f3108c3a7", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68473c0-61ab-41a7-be2a-1c1d0de09335", "record_id": "flaws_cloudtrail:0000336:68473c0-61ab-41a7-be2a-1c1d0de09335", "row_index": 336, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68473c0-61ab-41a7-be2a-1c1d0de09335", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c180392-f8ed-4a52-bd70-9f3b3d2fa351", "record_id": "flaws_cloudtrail:0000337:2c180392-f8ed-4a52-bd70-9f3b3d2fa351", "row_index": 337, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c180392-f8ed-4a52-bd70-9f3b3d2fa351", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c759404-b05c-4896-abb1-5960b252351bf", "record_id": "flaws_cloudtrail:0000338:c759404-b05c-4896-abb1-5960b252351bf", "row_index": 338, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c759404-b05c-4896-abb1-5960b252351bf", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "482544c-841f-4e80-a0ec-5e6104d20c58", "record_id": "flaws_cloudtrail:0000339:482544c-841f-4e80-a0ec-5e6104d20c58", "row_index": 339, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "482544c-841f-4e80-a0ec-5e6104d20c58", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c85e74f-6492-480c-ae45-e99b5d6c98e6", "record_id": "flaws_cloudtrail:0000340:3c85e74f-6492-480c-ae45-e99b5d6c98e6", "row_index": 340, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c85e74f-6492-480c-ae45-e99b5d6c98e6", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e22cd0-d80e-48fe-a1df-d0457cffae28", "record_id": "flaws_cloudtrail:0000341:f4e22cd0-d80e-48fe-a1df-d0457cffae28", "row_index": 341, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e22cd0-d80e-48fe-a1df-d0457cffae28", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79feb77d-5bc3-4dbf-9e45-05b2df1ca32b", "record_id": "flaws_cloudtrail:0000342:79feb77d-5bc3-4dbf-9e45-05b2df1ca32b", "row_index": 342, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79feb77d-5bc3-4dbf-9e45-05b2df1ca32b", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ec3a8d-23a0-465b-8e57-562e2de6f69f", "record_id": "flaws_cloudtrail:0000343:01ec3a8d-23a0-465b-8e57-562e2de6f69f", "row_index": 343, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ec3a8d-23a0-465b-8e57-562e2de6f69f", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14574bc-c70b-4332-82a3-c88b72f8701a", "record_id": "flaws_cloudtrail:0000344:14574bc-c70b-4332-82a3-c88b72f8701a", "row_index": 344, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14574bc-c70b-4332-82a3-c88b72f8701a", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd471153-381d-4ca0-ba81-dd3a5bb4d2d4", "record_id": "flaws_cloudtrail:0000345:bd471153-381d-4ca0-ba81-dd3a5bb4d2d4", "row_index": 345, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd471153-381d-4ca0-ba81-dd3a5bb4d2d4", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d51d1566-ac6f-4c47-856a-b164d33a4ea0", "record_id": "flaws_cloudtrail:0000346:d51d1566-ac6f-4c47-856a-b164d33a4ea0", "row_index": 346, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d51d1566-ac6f-4c47-856a-b164d33a4ea0", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d590484d-c657-4653-acd8-8cfb2a74d5b7", "record_id": "flaws_cloudtrail:0000347:d590484d-c657-4653-acd8-8cfb2a74d5b7", "row_index": 347, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d590484d-c657-4653-acd8-8cfb2a74d5b7", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b6d39f-97bf-4632-88f9-d818bc186a99", "record_id": "flaws_cloudtrail:0000348:54b6d39f-97bf-4632-88f9-d818bc186a99", "row_index": 348, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b6d39f-97bf-4632-88f9-d818bc186a99", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cda2639a-699f-4e6c-bfe3-226fd111947", "record_id": "flaws_cloudtrail:0000349:cda2639a-699f-4e6c-bfe3-226fd111947", "row_index": 349, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cda2639a-699f-4e6c-bfe3-226fd111947", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cf0112-0b39-41e0-8cb0-07a325295d", "record_id": "flaws_cloudtrail:0000350:28cf0112-0b39-41e0-8cb0-07a325295d", "row_index": 350, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cf0112-0b39-41e0-8cb0-07a325295d", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51feb999-d90e-49eb-884a-fca351972bbb", "record_id": "flaws_cloudtrail:0000351:51feb999-d90e-49eb-884a-fca351972bbb", "row_index": 351, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51feb999-d90e-49eb-884a-fca351972bbb", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3fd4c5b-3587-4780-befc-a275ef7f5ae3", "record_id": "flaws_cloudtrail:0000352:c3fd4c5b-3587-4780-befc-a275ef7f5ae3", "row_index": 352, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3fd4c5b-3587-4780-befc-a275ef7f5ae3", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5faabac-2692-4e57-a7ae-f31b21670f9e", "record_id": "flaws_cloudtrail:0000353:f5faabac-2692-4e57-a7ae-f31b21670f9e", "row_index": 353, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5faabac-2692-4e57-a7ae-f31b21670f9e", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1f4b05e-0a8e-4ef4-9c85-f62f09379d", "record_id": "flaws_cloudtrail:0000354:d1f4b05e-0a8e-4ef4-9c85-f62f09379d", "row_index": 354, "timestamp": "2019-07-08T15:44:27Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1f4b05e-0a8e-4ef4-9c85-f62f09379d", "eventTime": "2019-07-08T15:44:27Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7f38b7-3531-4d5d-a110-ceeea05c5603", "record_id": "flaws_cloudtrail:0000355:6a7f38b7-3531-4d5d-a110-ceeea05c5603", "row_index": 355, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7f38b7-3531-4d5d-a110-ceeea05c5603", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6b90a16-0c6f-4237-9de0-908c4674add6", "record_id": "flaws_cloudtrail:0000356:b6b90a16-0c6f-4237-9de0-908c4674add6", "row_index": 356, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6b90a16-0c6f-4237-9de0-908c4674add6", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74795-e8ec-4197-8b9d-fdd1628c1da2", "record_id": "flaws_cloudtrail:0000357:74795-e8ec-4197-8b9d-fdd1628c1da2", "row_index": 357, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74795-e8ec-4197-8b9d-fdd1628c1da2", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c69f5b3-9314-4436-be77-911fd2e9ed6c", "record_id": "flaws_cloudtrail:0000358:0c69f5b3-9314-4436-be77-911fd2e9ed6c", "row_index": 358, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c69f5b3-9314-4436-be77-911fd2e9ed6c", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7b51ae-5f11-41e2-b3dd-850f763d5e90", "record_id": "flaws_cloudtrail:0000359:8d7b51ae-5f11-41e2-b3dd-850f763d5e90", "row_index": 359, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7b51ae-5f11-41e2-b3dd-850f763d5e90", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10d3bb07-965d-4c60-a525-176efc669f1b", "record_id": "flaws_cloudtrail:0000360:10d3bb07-965d-4c60-a525-176efc669f1b", "row_index": 360, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10d3bb07-965d-4c60-a525-176efc669f1b", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d55fad-4d74-40ad-b1f9-cf7b4c80fae3", "record_id": "flaws_cloudtrail:0000361:c9d55fad-4d74-40ad-b1f9-cf7b4c80fae3", "row_index": 361, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d55fad-4d74-40ad-b1f9-cf7b4c80fae3", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a85f0ee5-9d69-46f4-9ff5-fa4fb2cb6b9a", "record_id": "flaws_cloudtrail:0000362:a85f0ee5-9d69-46f4-9ff5-fa4fb2cb6b9a", "row_index": 362, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a85f0ee5-9d69-46f4-9ff5-fa4fb2cb6b9a", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73f735ea-e1e9-4926-a83d-bb3ae4c9c129", "record_id": "flaws_cloudtrail:0000363:73f735ea-e1e9-4926-a83d-bb3ae4c9c129", "row_index": 363, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73f735ea-e1e9-4926-a83d-bb3ae4c9c129", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6834dfd9-8492-4c17-b877-9f440d002aba", "record_id": "flaws_cloudtrail:0000364:6834dfd9-8492-4c17-b877-9f440d002aba", "row_index": 364, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6834dfd9-8492-4c17-b877-9f440d002aba", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab6a7fa9-0be9-445c-b126-9aac0f7bbb96", "record_id": "flaws_cloudtrail:0000365:ab6a7fa9-0be9-445c-b126-9aac0f7bbb96", "row_index": 365, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab6a7fa9-0be9-445c-b126-9aac0f7bbb96", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b98fe3b-bcd2-4415-a2d4-04693c936", "record_id": "flaws_cloudtrail:0000366:1b98fe3b-bcd2-4415-a2d4-04693c936", "row_index": 366, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b98fe3b-bcd2-4415-a2d4-04693c936", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edd749bd-483c-466b-8bc9-28bc22f4ce04", "record_id": "flaws_cloudtrail:0000367:edd749bd-483c-466b-8bc9-28bc22f4ce04", "row_index": 367, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edd749bd-483c-466b-8bc9-28bc22f4ce04", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a22d2344-297d-4c85-b4d0-bc522c1f942a", "record_id": "flaws_cloudtrail:0000368:a22d2344-297d-4c85-b4d0-bc522c1f942a", "row_index": 368, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a22d2344-297d-4c85-b4d0-bc522c1f942a", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fd195ee-4e63-45b7-a00b-8b0eb63f3c5b", "record_id": "flaws_cloudtrail:0000369:8fd195ee-4e63-45b7-a00b-8b0eb63f3c5b", "row_index": 369, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fd195ee-4e63-45b7-a00b-8b0eb63f3c5b", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1faae0b9-22cd-4aa2-b84c-3c430d7bb027", "record_id": "flaws_cloudtrail:0000370:1faae0b9-22cd-4aa2-b84c-3c430d7bb027", "row_index": 370, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1faae0b9-22cd-4aa2-b84c-3c430d7bb027", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ba6afc2-074c-49a2-8e26-65c8fa3a5a6e", "record_id": "flaws_cloudtrail:0000371:2ba6afc2-074c-49a2-8e26-65c8fa3a5a6e", "row_index": 371, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ba6afc2-074c-49a2-8e26-65c8fa3a5a6e", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d723d6f1-5e16-4c45-ab96-5bc22980fb0", "record_id": "flaws_cloudtrail:0000372:d723d6f1-5e16-4c45-ab96-5bc22980fb0", "row_index": 372, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d723d6f1-5e16-4c45-ab96-5bc22980fb0", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7f38b7-3531-4d5d-a110-ceeea05c5603", "record_id": "flaws_cloudtrail:0000373:6a7f38b7-3531-4d5d-a110-ceeea05c5603", "row_index": 373, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7f38b7-3531-4d5d-a110-ceeea05c5603", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6b90a16-0c6f-4237-9de0-908c4674add6", "record_id": "flaws_cloudtrail:0000374:b6b90a16-0c6f-4237-9de0-908c4674add6", "row_index": 374, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6b90a16-0c6f-4237-9de0-908c4674add6", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74795-e8ec-4197-8b9d-fdd1628c1da2", "record_id": "flaws_cloudtrail:0000375:74795-e8ec-4197-8b9d-fdd1628c1da2", "row_index": 375, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74795-e8ec-4197-8b9d-fdd1628c1da2", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c69f5b3-9314-4436-be77-911fd2e9ed6c", "record_id": "flaws_cloudtrail:0000376:0c69f5b3-9314-4436-be77-911fd2e9ed6c", "row_index": 376, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c69f5b3-9314-4436-be77-911fd2e9ed6c", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7b51ae-5f11-41e2-b3dd-850f763d5e90", "record_id": "flaws_cloudtrail:0000377:8d7b51ae-5f11-41e2-b3dd-850f763d5e90", "row_index": 377, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7b51ae-5f11-41e2-b3dd-850f763d5e90", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10d3bb07-965d-4c60-a525-176efc669f1b", "record_id": "flaws_cloudtrail:0000378:10d3bb07-965d-4c60-a525-176efc669f1b", "row_index": 378, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10d3bb07-965d-4c60-a525-176efc669f1b", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d55fad-4d74-40ad-b1f9-cf7b4c80fae3", "record_id": "flaws_cloudtrail:0000379:c9d55fad-4d74-40ad-b1f9-cf7b4c80fae3", "row_index": 379, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d55fad-4d74-40ad-b1f9-cf7b4c80fae3", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a85f0ee5-9d69-46f4-9ff5-fa4fb2cb6b9a", "record_id": "flaws_cloudtrail:0000380:a85f0ee5-9d69-46f4-9ff5-fa4fb2cb6b9a", "row_index": 380, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a85f0ee5-9d69-46f4-9ff5-fa4fb2cb6b9a", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73f735ea-e1e9-4926-a83d-bb3ae4c9c129", "record_id": "flaws_cloudtrail:0000381:73f735ea-e1e9-4926-a83d-bb3ae4c9c129", "row_index": 381, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73f735ea-e1e9-4926-a83d-bb3ae4c9c129", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6834dfd9-8492-4c17-b877-9f440d002aba", "record_id": "flaws_cloudtrail:0000382:6834dfd9-8492-4c17-b877-9f440d002aba", "row_index": 382, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6834dfd9-8492-4c17-b877-9f440d002aba", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab6a7fa9-0be9-445c-b126-9aac0f7bbb96", "record_id": "flaws_cloudtrail:0000383:ab6a7fa9-0be9-445c-b126-9aac0f7bbb96", "row_index": 383, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab6a7fa9-0be9-445c-b126-9aac0f7bbb96", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b98fe3b-bcd2-4415-a2d4-04693c936", "record_id": "flaws_cloudtrail:0000384:1b98fe3b-bcd2-4415-a2d4-04693c936", "row_index": 384, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b98fe3b-bcd2-4415-a2d4-04693c936", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edd749bd-483c-466b-8bc9-28bc22f4ce04", "record_id": "flaws_cloudtrail:0000385:edd749bd-483c-466b-8bc9-28bc22f4ce04", "row_index": 385, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edd749bd-483c-466b-8bc9-28bc22f4ce04", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a22d2344-297d-4c85-b4d0-bc522c1f942a", "record_id": "flaws_cloudtrail:0000386:a22d2344-297d-4c85-b4d0-bc522c1f942a", "row_index": 386, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a22d2344-297d-4c85-b4d0-bc522c1f942a", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fd195ee-4e63-45b7-a00b-8b0eb63f3c5b", "record_id": "flaws_cloudtrail:0000387:8fd195ee-4e63-45b7-a00b-8b0eb63f3c5b", "row_index": 387, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fd195ee-4e63-45b7-a00b-8b0eb63f3c5b", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1faae0b9-22cd-4aa2-b84c-3c430d7bb027", "record_id": "flaws_cloudtrail:0000388:1faae0b9-22cd-4aa2-b84c-3c430d7bb027", "row_index": 388, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1faae0b9-22cd-4aa2-b84c-3c430d7bb027", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ba6afc2-074c-49a2-8e26-65c8fa3a5a6e", "record_id": "flaws_cloudtrail:0000389:2ba6afc2-074c-49a2-8e26-65c8fa3a5a6e", "row_index": 389, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ba6afc2-074c-49a2-8e26-65c8fa3a5a6e", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d723d6f1-5e16-4c45-ab96-5bc22980fb0", "record_id": "flaws_cloudtrail:0000390:d723d6f1-5e16-4c45-ab96-5bc22980fb0", "row_index": 390, "timestamp": "2019-07-08T15:44:28Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d723d6f1-5e16-4c45-ab96-5bc22980fb0", "eventTime": "2019-07-08T15:44:28Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24aec681-a386-4d5a-b0c4-eff90dbac03d", "record_id": "flaws_cloudtrail:0000391:24aec681-a386-4d5a-b0c4-eff90dbac03d", "row_index": 391, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24aec681-a386-4d5a-b0c4-eff90dbac03d", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "639c087e-7119-429c-8a59-7a9be49107f", "record_id": "flaws_cloudtrail:0000392:639c087e-7119-429c-8a59-7a9be49107f", "row_index": 392, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "639c087e-7119-429c-8a59-7a9be49107f", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa5d8ff8-c975-413b-aa6e-e46113254358", "record_id": "flaws_cloudtrail:0000393:fa5d8ff8-c975-413b-aa6e-e46113254358", "row_index": 393, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa5d8ff8-c975-413b-aa6e-e46113254358", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b362dff-67f1-49a4-89bb-113966d467a8", "record_id": "flaws_cloudtrail:0000394:2b362dff-67f1-49a4-89bb-113966d467a8", "row_index": 394, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b362dff-67f1-49a4-89bb-113966d467a8", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c437e93-affa-4224-b16e-1f4f61b8149b", "record_id": "flaws_cloudtrail:0000395:3c437e93-affa-4224-b16e-1f4f61b8149b", "row_index": 395, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c437e93-affa-4224-b16e-1f4f61b8149b", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "575a6f9a-715c-40db-8ceb-5fb06c41d947", "record_id": "flaws_cloudtrail:0000396:575a6f9a-715c-40db-8ceb-5fb06c41d947", "row_index": 396, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "575a6f9a-715c-40db-8ceb-5fb06c41d947", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a659fd9-0ce4-4edd-94bb-22795d8a5e67", "record_id": "flaws_cloudtrail:0000397:1a659fd9-0ce4-4edd-94bb-22795d8a5e67", "row_index": 397, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a659fd9-0ce4-4edd-94bb-22795d8a5e67", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f8390ba-73e8-4aa0-b66c-5ee09a9bf4ec", "record_id": "flaws_cloudtrail:0000398:8f8390ba-73e8-4aa0-b66c-5ee09a9bf4ec", "row_index": 398, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f8390ba-73e8-4aa0-b66c-5ee09a9bf4ec", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b13b059-8e60-4bcf-8023-9ac09ef20b6b", "record_id": "flaws_cloudtrail:0000399:3b13b059-8e60-4bcf-8023-9ac09ef20b6b", "row_index": 399, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b13b059-8e60-4bcf-8023-9ac09ef20b6b", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "718825c-16d8-4417-bda2-a897ba1541ee", "record_id": "flaws_cloudtrail:0000400:718825c-16d8-4417-bda2-a897ba1541ee", "row_index": 400, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "718825c-16d8-4417-bda2-a897ba1541ee", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1a0d29-97a4-4646-9b3f-a6597556b1d6", "record_id": "flaws_cloudtrail:0000401:fb1a0d29-97a4-4646-9b3f-a6597556b1d6", "row_index": 401, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1a0d29-97a4-4646-9b3f-a6597556b1d6", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c923f856-74ff-4fc0-b00f-91450380daf6", "record_id": "flaws_cloudtrail:0000402:c923f856-74ff-4fc0-b00f-91450380daf6", "row_index": 402, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c923f856-74ff-4fc0-b00f-91450380daf6", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7091f0e-a281-466b-bae8-893a16bd1d16", "record_id": "flaws_cloudtrail:0000403:d7091f0e-a281-466b-bae8-893a16bd1d16", "row_index": 403, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7091f0e-a281-466b-bae8-893a16bd1d16", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbebdfe-522a-426a-b4c2-e43a6d6daeef", "record_id": "flaws_cloudtrail:0000404:cdbebdfe-522a-426a-b4c2-e43a6d6daeef", "row_index": 404, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbebdfe-522a-426a-b4c2-e43a6d6daeef", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6aeb96e-8666-4bd0-a658-a30ac36765b4", "record_id": "flaws_cloudtrail:0000405:a6aeb96e-8666-4bd0-a658-a30ac36765b4", "row_index": 405, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6aeb96e-8666-4bd0-a658-a30ac36765b4", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9013f14-afb8-47b8-adb3-4aa28312f68e", "record_id": "flaws_cloudtrail:0000406:d9013f14-afb8-47b8-adb3-4aa28312f68e", "row_index": 406, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9013f14-afb8-47b8-adb3-4aa28312f68e", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6602aa85-33c3-47f8-a8d0-b775c63c2a52", "record_id": "flaws_cloudtrail:0000407:6602aa85-33c3-47f8-a8d0-b775c63c2a52", "row_index": 407, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6602aa85-33c3-47f8-a8d0-b775c63c2a52", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b4b6edb-4c7f-41d9-adc1-98cf9e6d3132", "record_id": "flaws_cloudtrail:0000408:7b4b6edb-4c7f-41d9-adc1-98cf9e6d3132", "row_index": 408, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b4b6edb-4c7f-41d9-adc1-98cf9e6d3132", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "824be3fd-689b-44a8-8db4-61653c6ffe", "record_id": "flaws_cloudtrail:0000409:824be3fd-689b-44a8-8db4-61653c6ffe", "row_index": 409, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "824be3fd-689b-44a8-8db4-61653c6ffe", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b0ed6e-cdc8-4f39-8d47-99a3e7797ee6", "record_id": "flaws_cloudtrail:0000410:18b0ed6e-cdc8-4f39-8d47-99a3e7797ee6", "row_index": 410, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b0ed6e-cdc8-4f39-8d47-99a3e7797ee6", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f1eb99c-81de-41e0-8085-70658eae720", "record_id": "flaws_cloudtrail:0000411:9f1eb99c-81de-41e0-8085-70658eae720", "row_index": 411, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f1eb99c-81de-41e0-8085-70658eae720", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f448b1e6-87e4-45c7-85aa-d4acc36ae269", "record_id": "flaws_cloudtrail:0000412:f448b1e6-87e4-45c7-85aa-d4acc36ae269", "row_index": 412, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f448b1e6-87e4-45c7-85aa-d4acc36ae269", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b83c7a1-673a-4e08-8aed-c190cfeb776b", "record_id": "flaws_cloudtrail:0000413:2b83c7a1-673a-4e08-8aed-c190cfeb776b", "row_index": 413, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b83c7a1-673a-4e08-8aed-c190cfeb776b", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6eded6e-c78b-4fcc-b688-9b4a294411a", "record_id": "flaws_cloudtrail:0000414:e6eded6e-c78b-4fcc-b688-9b4a294411a", "row_index": 414, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6eded6e-c78b-4fcc-b688-9b4a294411a", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d56cb5d-9fdc-4380-838e-fd727b337c1f", "record_id": "flaws_cloudtrail:0000415:4d56cb5d-9fdc-4380-838e-fd727b337c1f", "row_index": 415, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d56cb5d-9fdc-4380-838e-fd727b337c1f", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7adaa8e0-3a0e-4cc6-a8e0-b905b29235", "record_id": "flaws_cloudtrail:0000416:7adaa8e0-3a0e-4cc6-a8e0-b905b29235", "row_index": 416, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7adaa8e0-3a0e-4cc6-a8e0-b905b29235", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bf8bf1d-33f1-443a-b780-fc3695c4b498", "record_id": "flaws_cloudtrail:0000417:0bf8bf1d-33f1-443a-b780-fc3695c4b498", "row_index": 417, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bf8bf1d-33f1-443a-b780-fc3695c4b498", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e32592-2662-411b-a77a-6ba8235703e0", "record_id": "flaws_cloudtrail:0000418:95e32592-2662-411b-a77a-6ba8235703e0", "row_index": 418, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e32592-2662-411b-a77a-6ba8235703e0", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1aaf59c-9865-48ee-840f-c9b8a0dffd82", "record_id": "flaws_cloudtrail:0000419:a1aaf59c-9865-48ee-840f-c9b8a0dffd82", "row_index": 419, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1aaf59c-9865-48ee-840f-c9b8a0dffd82", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186e5dc9-ba48-4f63-ac81-d59f43314", "record_id": "flaws_cloudtrail:0000420:186e5dc9-ba48-4f63-ac81-d59f43314", "row_index": 420, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186e5dc9-ba48-4f63-ac81-d59f43314", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c4f21da-c955-4dfb-acd3-9b6d5030b51e", "record_id": "flaws_cloudtrail:0000421:6c4f21da-c955-4dfb-acd3-9b6d5030b51e", "row_index": 421, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c4f21da-c955-4dfb-acd3-9b6d5030b51e", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0adddb4-9707-432e-879f-06fae7742a64", "record_id": "flaws_cloudtrail:0000422:c0adddb4-9707-432e-879f-06fae7742a64", "row_index": 422, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0adddb4-9707-432e-879f-06fae7742a64", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359973f8b-e1df-42d8-a579-e856a0c10ba3", "record_id": "flaws_cloudtrail:0000423:359973f8b-e1df-42d8-a579-e856a0c10ba3", "row_index": 423, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359973f8b-e1df-42d8-a579-e856a0c10ba3", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24aec681-a386-4d5a-b0c4-eff90dbac03d", "record_id": "flaws_cloudtrail:0000424:24aec681-a386-4d5a-b0c4-eff90dbac03d", "row_index": 424, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24aec681-a386-4d5a-b0c4-eff90dbac03d", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "639c087e-7119-429c-8a59-7a9be49107f", "record_id": "flaws_cloudtrail:0000425:639c087e-7119-429c-8a59-7a9be49107f", "row_index": 425, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "639c087e-7119-429c-8a59-7a9be49107f", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa5d8ff8-c975-413b-aa6e-e46113254358", "record_id": "flaws_cloudtrail:0000426:fa5d8ff8-c975-413b-aa6e-e46113254358", "row_index": 426, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa5d8ff8-c975-413b-aa6e-e46113254358", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b362dff-67f1-49a4-89bb-113966d467a8", "record_id": "flaws_cloudtrail:0000427:2b362dff-67f1-49a4-89bb-113966d467a8", "row_index": 427, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b362dff-67f1-49a4-89bb-113966d467a8", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c437e93-affa-4224-b16e-1f4f61b8149b", "record_id": "flaws_cloudtrail:0000428:3c437e93-affa-4224-b16e-1f4f61b8149b", "row_index": 428, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c437e93-affa-4224-b16e-1f4f61b8149b", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "575a6f9a-715c-40db-8ceb-5fb06c41d947", "record_id": "flaws_cloudtrail:0000429:575a6f9a-715c-40db-8ceb-5fb06c41d947", "row_index": 429, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "575a6f9a-715c-40db-8ceb-5fb06c41d947", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a659fd9-0ce4-4edd-94bb-22795d8a5e67", "record_id": "flaws_cloudtrail:0000430:1a659fd9-0ce4-4edd-94bb-22795d8a5e67", "row_index": 430, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a659fd9-0ce4-4edd-94bb-22795d8a5e67", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f8390ba-73e8-4aa0-b66c-5ee09a9bf4ec", "record_id": "flaws_cloudtrail:0000431:8f8390ba-73e8-4aa0-b66c-5ee09a9bf4ec", "row_index": 431, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f8390ba-73e8-4aa0-b66c-5ee09a9bf4ec", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b13b059-8e60-4bcf-8023-9ac09ef20b6b", "record_id": "flaws_cloudtrail:0000432:3b13b059-8e60-4bcf-8023-9ac09ef20b6b", "row_index": 432, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b13b059-8e60-4bcf-8023-9ac09ef20b6b", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "718825c-16d8-4417-bda2-a897ba1541ee", "record_id": "flaws_cloudtrail:0000433:718825c-16d8-4417-bda2-a897ba1541ee", "row_index": 433, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "718825c-16d8-4417-bda2-a897ba1541ee", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1a0d29-97a4-4646-9b3f-a6597556b1d6", "record_id": "flaws_cloudtrail:0000434:fb1a0d29-97a4-4646-9b3f-a6597556b1d6", "row_index": 434, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1a0d29-97a4-4646-9b3f-a6597556b1d6", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c923f856-74ff-4fc0-b00f-91450380daf6", "record_id": "flaws_cloudtrail:0000435:c923f856-74ff-4fc0-b00f-91450380daf6", "row_index": 435, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c923f856-74ff-4fc0-b00f-91450380daf6", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7091f0e-a281-466b-bae8-893a16bd1d16", "record_id": "flaws_cloudtrail:0000436:d7091f0e-a281-466b-bae8-893a16bd1d16", "row_index": 436, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7091f0e-a281-466b-bae8-893a16bd1d16", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbebdfe-522a-426a-b4c2-e43a6d6daeef", "record_id": "flaws_cloudtrail:0000437:cdbebdfe-522a-426a-b4c2-e43a6d6daeef", "row_index": 437, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbebdfe-522a-426a-b4c2-e43a6d6daeef", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6aeb96e-8666-4bd0-a658-a30ac36765b4", "record_id": "flaws_cloudtrail:0000438:a6aeb96e-8666-4bd0-a658-a30ac36765b4", "row_index": 438, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6aeb96e-8666-4bd0-a658-a30ac36765b4", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9013f14-afb8-47b8-adb3-4aa28312f68e", "record_id": "flaws_cloudtrail:0000439:d9013f14-afb8-47b8-adb3-4aa28312f68e", "row_index": 439, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9013f14-afb8-47b8-adb3-4aa28312f68e", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6602aa85-33c3-47f8-a8d0-b775c63c2a52", "record_id": "flaws_cloudtrail:0000440:6602aa85-33c3-47f8-a8d0-b775c63c2a52", "row_index": 440, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6602aa85-33c3-47f8-a8d0-b775c63c2a52", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b4b6edb-4c7f-41d9-adc1-98cf9e6d3132", "record_id": "flaws_cloudtrail:0000441:7b4b6edb-4c7f-41d9-adc1-98cf9e6d3132", "row_index": 441, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b4b6edb-4c7f-41d9-adc1-98cf9e6d3132", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "824be3fd-689b-44a8-8db4-61653c6ffe", "record_id": "flaws_cloudtrail:0000442:824be3fd-689b-44a8-8db4-61653c6ffe", "row_index": 442, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "824be3fd-689b-44a8-8db4-61653c6ffe", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b0ed6e-cdc8-4f39-8d47-99a3e7797ee6", "record_id": "flaws_cloudtrail:0000443:18b0ed6e-cdc8-4f39-8d47-99a3e7797ee6", "row_index": 443, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b0ed6e-cdc8-4f39-8d47-99a3e7797ee6", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f1eb99c-81de-41e0-8085-70658eae720", "record_id": "flaws_cloudtrail:0000444:9f1eb99c-81de-41e0-8085-70658eae720", "row_index": 444, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f1eb99c-81de-41e0-8085-70658eae720", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f448b1e6-87e4-45c7-85aa-d4acc36ae269", "record_id": "flaws_cloudtrail:0000445:f448b1e6-87e4-45c7-85aa-d4acc36ae269", "row_index": 445, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f448b1e6-87e4-45c7-85aa-d4acc36ae269", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b83c7a1-673a-4e08-8aed-c190cfeb776b", "record_id": "flaws_cloudtrail:0000446:2b83c7a1-673a-4e08-8aed-c190cfeb776b", "row_index": 446, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b83c7a1-673a-4e08-8aed-c190cfeb776b", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6eded6e-c78b-4fcc-b688-9b4a294411a", "record_id": "flaws_cloudtrail:0000447:e6eded6e-c78b-4fcc-b688-9b4a294411a", "row_index": 447, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6eded6e-c78b-4fcc-b688-9b4a294411a", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d56cb5d-9fdc-4380-838e-fd727b337c1f", "record_id": "flaws_cloudtrail:0000448:4d56cb5d-9fdc-4380-838e-fd727b337c1f", "row_index": 448, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d56cb5d-9fdc-4380-838e-fd727b337c1f", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7adaa8e0-3a0e-4cc6-a8e0-b905b29235", "record_id": "flaws_cloudtrail:0000449:7adaa8e0-3a0e-4cc6-a8e0-b905b29235", "row_index": 449, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7adaa8e0-3a0e-4cc6-a8e0-b905b29235", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bf8bf1d-33f1-443a-b780-fc3695c4b498", "record_id": "flaws_cloudtrail:0000450:0bf8bf1d-33f1-443a-b780-fc3695c4b498", "row_index": 450, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bf8bf1d-33f1-443a-b780-fc3695c4b498", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95e32592-2662-411b-a77a-6ba8235703e0", "record_id": "flaws_cloudtrail:0000451:95e32592-2662-411b-a77a-6ba8235703e0", "row_index": 451, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95e32592-2662-411b-a77a-6ba8235703e0", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1aaf59c-9865-48ee-840f-c9b8a0dffd82", "record_id": "flaws_cloudtrail:0000452:a1aaf59c-9865-48ee-840f-c9b8a0dffd82", "row_index": 452, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1aaf59c-9865-48ee-840f-c9b8a0dffd82", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186e5dc9-ba48-4f63-ac81-d59f43314", "record_id": "flaws_cloudtrail:0000453:186e5dc9-ba48-4f63-ac81-d59f43314", "row_index": 453, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186e5dc9-ba48-4f63-ac81-d59f43314", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c4f21da-c955-4dfb-acd3-9b6d5030b51e", "record_id": "flaws_cloudtrail:0000454:6c4f21da-c955-4dfb-acd3-9b6d5030b51e", "row_index": 454, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c4f21da-c955-4dfb-acd3-9b6d5030b51e", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0adddb4-9707-432e-879f-06fae7742a64", "record_id": "flaws_cloudtrail:0000455:c0adddb4-9707-432e-879f-06fae7742a64", "row_index": 455, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0adddb4-9707-432e-879f-06fae7742a64", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359973f8b-e1df-42d8-a579-e856a0c10ba3", "record_id": "flaws_cloudtrail:0000456:359973f8b-e1df-42d8-a579-e856a0c10ba3", "row_index": 456, "timestamp": "2019-07-08T15:44:29Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359973f8b-e1df-42d8-a579-e856a0c10ba3", "eventTime": "2019-07-08T15:44:29Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb39d32b-435a-4e94-8f47-4ea9bdd88676", "record_id": "flaws_cloudtrail:0000457:bb39d32b-435a-4e94-8f47-4ea9bdd88676", "row_index": 457, "timestamp": "2019-07-08T16:01:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb39d32b-435a-4e94-8f47-4ea9bdd88676", "eventTime": "2019-07-08T16:01:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb39d32b-435a-4e94-8f47-4ea9bdd88676", "record_id": "flaws_cloudtrail:0000458:bb39d32b-435a-4e94-8f47-4ea9bdd88676", "row_index": 458, "timestamp": "2019-07-08T16:01:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb39d32b-435a-4e94-8f47-4ea9bdd88676", "eventTime": "2019-07-08T16:01:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bad4ea9-d4ab-4452-8316-931551a", "record_id": "flaws_cloudtrail:0000459:4bad4ea9-d4ab-4452-8316-931551a", "row_index": 459, "timestamp": "2019-07-08T16:08:42Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bad4ea9-d4ab-4452-8316-931551a", "eventTime": "2019-07-08T16:08:42Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bad4ea9-d4ab-4452-8316-931551a", "record_id": "flaws_cloudtrail:0000460:4bad4ea9-d4ab-4452-8316-931551a", "row_index": 460, "timestamp": "2019-07-08T16:08:42Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bad4ea9-d4ab-4452-8316-931551a", "eventTime": "2019-07-08T16:08:42Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0347c5-6ea2-4a66-a43d-339dad0b21ef", "record_id": "flaws_cloudtrail:0000461:1a0347c5-6ea2-4a66-a43d-339dad0b21ef", "row_index": 461, "timestamp": "2019-07-08T16:10:31Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0347c5-6ea2-4a66-a43d-339dad0b21ef", "eventTime": "2019-07-08T16:10:31Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0347c5-6ea2-4a66-a43d-339dad0b21ef", "record_id": "flaws_cloudtrail:0000462:1a0347c5-6ea2-4a66-a43d-339dad0b21ef", "row_index": 462, "timestamp": "2019-07-08T16:10:31Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0347c5-6ea2-4a66-a43d-339dad0b21ef", "eventTime": "2019-07-08T16:10:31Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ed8de35-848f-4188-a8e2-f1cdf2badcad", "record_id": "flaws_cloudtrail:0000463:3ed8de35-848f-4188-a8e2-f1cdf2badcad", "row_index": 463, "timestamp": "2019-07-08T16:24:25Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ed8de35-848f-4188-a8e2-f1cdf2badcad", "eventTime": "2019-07-08T16:24:25Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ed8de35-848f-4188-a8e2-f1cdf2badcad", "record_id": "flaws_cloudtrail:0000464:3ed8de35-848f-4188-a8e2-f1cdf2badcad", "row_index": 464, "timestamp": "2019-07-08T16:24:25Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ed8de35-848f-4188-a8e2-f1cdf2badcad", "eventTime": "2019-07-08T16:24:25Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5676e273-c036-4280-87f5-64b4e121e1ef", "record_id": "flaws_cloudtrail:0000465:5676e273-c036-4280-87f5-64b4e121e1ef", "row_index": 465, "timestamp": "2019-07-08T16:25:49Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5676e273-c036-4280-87f5-64b4e121e1ef", "eventTime": "2019-07-08T16:25:49Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5676e273-c036-4280-87f5-64b4e121e1ef", "record_id": "flaws_cloudtrail:0000466:5676e273-c036-4280-87f5-64b4e121e1ef", "row_index": 466, "timestamp": "2019-07-08T16:25:49Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5676e273-c036-4280-87f5-64b4e121e1ef", "eventTime": "2019-07-08T16:25:49Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27bfe5af-74b9-48b3-8ff7-a4fe736fd252", "record_id": "flaws_cloudtrail:0000467:27bfe5af-74b9-48b3-8ff7-a4fe736fd252", "row_index": 467, "timestamp": "2019-07-08T16:28:56Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27bfe5af-74b9-48b3-8ff7-a4fe736fd252", "eventTime": "2019-07-08T16:28:56Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27bfe5af-74b9-48b3-8ff7-a4fe736fd252", "record_id": "flaws_cloudtrail:0000468:27bfe5af-74b9-48b3-8ff7-a4fe736fd252", "row_index": 468, "timestamp": "2019-07-08T16:28:56Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27bfe5af-74b9-48b3-8ff7-a4fe736fd252", "eventTime": "2019-07-08T16:28:56Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ea0e7f-fb06-4e38-b87a-2e79c7e91488", "record_id": "flaws_cloudtrail:0000469:52ea0e7f-fb06-4e38-b87a-2e79c7e91488", "row_index": 469, "timestamp": "2019-07-08T16:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ea0e7f-fb06-4e38-b87a-2e79c7e91488", "eventTime": "2019-07-08T16:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASH9M08Y2815J1QGY", "expiration": "Jul 8, 2019 10:39:50 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ea0e7f-fb06-4e38-b87a-2e79c7e91488", "record_id": "flaws_cloudtrail:0000470:52ea0e7f-fb06-4e38-b87a-2e79c7e91488", "row_index": 470, "timestamp": "2019-07-08T16:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1870, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ea0e7f-fb06-4e38-b87a-2e79c7e91488", "eventTime": "2019-07-08T16:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASH9M08Y2815J1QGY", "expiration": "Jul 8, 2019 10:39:50 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b3052dc-4114-4883-825c-280ede486bd3", "record_id": "flaws_cloudtrail:0000471:7b3052dc-4114-4883-825c-280ede486bd3", "row_index": 471, "timestamp": "2019-07-08T16:30:02Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b3052dc-4114-4883-825c-280ede486bd3", "eventTime": "2019-07-08T16:30:02Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b3052dc-4114-4883-825c-280ede486bd3", "record_id": "flaws_cloudtrail:0000472:7b3052dc-4114-4883-825c-280ede486bd3", "row_index": 472, "timestamp": "2019-07-08T16:30:02Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b3052dc-4114-4883-825c-280ede486bd3", "eventTime": "2019-07-08T16:30:02Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7bb0fd-f357-4ad8-a5e9-0ab10a349ea0", "record_id": "flaws_cloudtrail:0000473:3c7bb0fd-f357-4ad8-a5e9-0ab10a349ea0", "row_index": 473, "timestamp": "2019-07-08T16:31:13Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7bb0fd-f357-4ad8-a5e9-0ab10a349ea0", "eventTime": "2019-07-08T16:31:13Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c7bb0fd-f357-4ad8-a5e9-0ab10a349ea0", "record_id": "flaws_cloudtrail:0000474:3c7bb0fd-f357-4ad8-a5e9-0ab10a349ea0", "row_index": 474, "timestamp": "2019-07-08T16:31:13Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c7bb0fd-f357-4ad8-a5e9-0ab10a349ea0", "eventTime": "2019-07-08T16:31:13Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e6497a3-f3aa-42e4-a322-77c9a12281f8", "record_id": "flaws_cloudtrail:0000475:3e6497a3-f3aa-42e4-a322-77c9a12281f8", "row_index": 475, "timestamp": "2019-07-08T16:38:50Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e6497a3-f3aa-42e4-a322-77c9a12281f8", "eventTime": "2019-07-08T16:38:50Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e6497a3-f3aa-42e4-a322-77c9a12281f8", "record_id": "flaws_cloudtrail:0000476:3e6497a3-f3aa-42e4-a322-77c9a12281f8", "row_index": 476, "timestamp": "2019-07-08T16:38:50Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e6497a3-f3aa-42e4-a322-77c9a12281f8", "eventTime": "2019-07-08T16:38:50Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.86 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.170", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160245e7-57ab-45fd-9284-959314d133a60", "record_id": "flaws_cloudtrail:0000477:160245e7-57ab-45fd-9284-959314d133a60", "row_index": 477, "timestamp": "2019-07-08T16:45:07Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160245e7-57ab-45fd-9284-959314d133a60", "eventTime": "2019-07-08T16:45:07Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee9de256-8baf-4714-bcc5-02909d9168", "record_id": "flaws_cloudtrail:0000478:ee9de256-8baf-4714-bcc5-02909d9168", "row_index": 478, "timestamp": "2019-07-08T16:45:07Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee9de256-8baf-4714-bcc5-02909d9168", "eventTime": "2019-07-08T16:45:07Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160245e7-57ab-45fd-9284-959314d133a60", "record_id": "flaws_cloudtrail:0000479:160245e7-57ab-45fd-9284-959314d133a60", "row_index": 479, "timestamp": "2019-07-08T16:45:07Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160245e7-57ab-45fd-9284-959314d133a60", "eventTime": "2019-07-08T16:45:07Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee9de256-8baf-4714-bcc5-02909d9168", "record_id": "flaws_cloudtrail:0000480:ee9de256-8baf-4714-bcc5-02909d9168", "row_index": 480, "timestamp": "2019-07-08T16:45:07Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee9de256-8baf-4714-bcc5-02909d9168", "eventTime": "2019-07-08T16:45:07Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243afba0-e798-4d2b-8e39-a9db92459", "record_id": "flaws_cloudtrail:0000481:243afba0-e798-4d2b-8e39-a9db92459", "row_index": 481, "timestamp": "2019-07-08T16:45:08Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243afba0-e798-4d2b-8e39-a9db92459", "eventTime": "2019-07-08T16:45:08Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243afba0-e798-4d2b-8e39-a9db92459", "record_id": "flaws_cloudtrail:0000482:243afba0-e798-4d2b-8e39-a9db92459", "row_index": 482, "timestamp": "2019-07-08T16:45:08Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243afba0-e798-4d2b-8e39-a9db92459", "eventTime": "2019-07-08T16:45:08Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3e48b83-2aed-4819-8e59-b654884f020ec", "record_id": "flaws_cloudtrail:0000483:e3e48b83-2aed-4819-8e59-b654884f020ec", "row_index": 483, "timestamp": "2019-07-08T16:45:10Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3e48b83-2aed-4819-8e59-b654884f020ec", "eventTime": "2019-07-08T16:45:10Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b93eed6-20ac-44c2-861c-88c22253ff14", "record_id": "flaws_cloudtrail:0000484:2b93eed6-20ac-44c2-861c-88c22253ff14", "row_index": 484, "timestamp": "2019-07-08T16:45:10Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b93eed6-20ac-44c2-861c-88c22253ff14", "eventTime": "2019-07-08T16:45:10Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ddbb98f-5213-47d3-9bee-bfd7d6a91ac5", "record_id": "flaws_cloudtrail:0000485:2ddbb98f-5213-47d3-9bee-bfd7d6a91ac5", "row_index": 485, "timestamp": "2019-07-08T16:45:10Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ddbb98f-5213-47d3-9bee-bfd7d6a91ac5", "eventTime": "2019-07-08T16:45:10Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e859b6f-ddc3-449f-9833-b3cd68b526cc", "record_id": "flaws_cloudtrail:0000486:3e859b6f-ddc3-449f-9833-b3cd68b526cc", "row_index": 486, "timestamp": "2019-07-08T16:45:10Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e859b6f-ddc3-449f-9833-b3cd68b526cc", "eventTime": "2019-07-08T16:45:10Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3e48b83-2aed-4819-8e59-b654884f020ec", "record_id": "flaws_cloudtrail:0000487:e3e48b83-2aed-4819-8e59-b654884f020ec", "row_index": 487, "timestamp": "2019-07-08T16:45:10Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3e48b83-2aed-4819-8e59-b654884f020ec", "eventTime": "2019-07-08T16:45:10Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b93eed6-20ac-44c2-861c-88c22253ff14", "record_id": "flaws_cloudtrail:0000488:2b93eed6-20ac-44c2-861c-88c22253ff14", "row_index": 488, "timestamp": "2019-07-08T16:45:10Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b93eed6-20ac-44c2-861c-88c22253ff14", "eventTime": "2019-07-08T16:45:10Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ddbb98f-5213-47d3-9bee-bfd7d6a91ac5", "record_id": "flaws_cloudtrail:0000489:2ddbb98f-5213-47d3-9bee-bfd7d6a91ac5", "row_index": 489, "timestamp": "2019-07-08T16:45:10Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ddbb98f-5213-47d3-9bee-bfd7d6a91ac5", "eventTime": "2019-07-08T16:45:10Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e859b6f-ddc3-449f-9833-b3cd68b526cc", "record_id": "flaws_cloudtrail:0000490:3e859b6f-ddc3-449f-9833-b3cd68b526cc", "row_index": 490, "timestamp": "2019-07-08T16:45:10Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e859b6f-ddc3-449f-9833-b3cd68b526cc", "eventTime": "2019-07-08T16:45:10Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e4e64f-e780-49a5-afda-df1f64fb2227", "record_id": "flaws_cloudtrail:0000491:30e4e64f-e780-49a5-afda-df1f64fb2227", "row_index": 491, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e4e64f-e780-49a5-afda-df1f64fb2227", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dcd9a61-7bca-4f94-b3de-cd2586b6b176", "record_id": "flaws_cloudtrail:0000492:1dcd9a61-7bca-4f94-b3de-cd2586b6b176", "row_index": 492, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dcd9a61-7bca-4f94-b3de-cd2586b6b176", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b960899-302d-4203-b20f-0a95b26410b3", "record_id": "flaws_cloudtrail:0000493:b960899-302d-4203-b20f-0a95b26410b3", "row_index": 493, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b960899-302d-4203-b20f-0a95b26410b3", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d2744c-4ade-487a-8ded-f50bfd20c3ac", "record_id": "flaws_cloudtrail:0000494:44d2744c-4ade-487a-8ded-f50bfd20c3ac", "row_index": 494, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d2744c-4ade-487a-8ded-f50bfd20c3ac", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a847c78-d01a-4dc3-afdd-6391a275ca9d", "record_id": "flaws_cloudtrail:0000495:4a847c78-d01a-4dc3-afdd-6391a275ca9d", "row_index": 495, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a847c78-d01a-4dc3-afdd-6391a275ca9d", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7682c3f1-6fca-4a93-b096-cff6bacccb53", "record_id": "flaws_cloudtrail:0000496:7682c3f1-6fca-4a93-b096-cff6bacccb53", "row_index": 496, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7682c3f1-6fca-4a93-b096-cff6bacccb53", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b48bd95-efc9-4152-ba57-6fdf4933b62a", "record_id": "flaws_cloudtrail:0000497:0b48bd95-efc9-4152-ba57-6fdf4933b62a", "row_index": 497, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b48bd95-efc9-4152-ba57-6fdf4933b62a", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266c77ea-593e-4ef6-aa08-e9877ae27e5f", "record_id": "flaws_cloudtrail:0000498:266c77ea-593e-4ef6-aa08-e9877ae27e5f", "row_index": 498, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266c77ea-593e-4ef6-aa08-e9877ae27e5f", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e4e64f-e780-49a5-afda-df1f64fb2227", "record_id": "flaws_cloudtrail:0000499:30e4e64f-e780-49a5-afda-df1f64fb2227", "row_index": 499, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e4e64f-e780-49a5-afda-df1f64fb2227", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dcd9a61-7bca-4f94-b3de-cd2586b6b176", "record_id": "flaws_cloudtrail:0000500:1dcd9a61-7bca-4f94-b3de-cd2586b6b176", "row_index": 500, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dcd9a61-7bca-4f94-b3de-cd2586b6b176", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b960899-302d-4203-b20f-0a95b26410b3", "record_id": "flaws_cloudtrail:0000501:b960899-302d-4203-b20f-0a95b26410b3", "row_index": 501, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b960899-302d-4203-b20f-0a95b26410b3", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d2744c-4ade-487a-8ded-f50bfd20c3ac", "record_id": "flaws_cloudtrail:0000502:44d2744c-4ade-487a-8ded-f50bfd20c3ac", "row_index": 502, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d2744c-4ade-487a-8ded-f50bfd20c3ac", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a847c78-d01a-4dc3-afdd-6391a275ca9d", "record_id": "flaws_cloudtrail:0000503:4a847c78-d01a-4dc3-afdd-6391a275ca9d", "row_index": 503, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a847c78-d01a-4dc3-afdd-6391a275ca9d", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7682c3f1-6fca-4a93-b096-cff6bacccb53", "record_id": "flaws_cloudtrail:0000504:7682c3f1-6fca-4a93-b096-cff6bacccb53", "row_index": 504, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7682c3f1-6fca-4a93-b096-cff6bacccb53", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b48bd95-efc9-4152-ba57-6fdf4933b62a", "record_id": "flaws_cloudtrail:0000505:0b48bd95-efc9-4152-ba57-6fdf4933b62a", "row_index": 505, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b48bd95-efc9-4152-ba57-6fdf4933b62a", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266c77ea-593e-4ef6-aa08-e9877ae27e5f", "record_id": "flaws_cloudtrail:0000506:266c77ea-593e-4ef6-aa08-e9877ae27e5f", "row_index": 506, "timestamp": "2019-07-08T16:45:11Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266c77ea-593e-4ef6-aa08-e9877ae27e5f", "eventTime": "2019-07-08T16:45:11Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d35c1807-15a0-4945-8ef2-7fc39499b843", "record_id": "flaws_cloudtrail:0000507:d35c1807-15a0-4945-8ef2-7fc39499b843", "row_index": 507, "timestamp": "2019-07-08T16:45:12Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d35c1807-15a0-4945-8ef2-7fc39499b843", "eventTime": "2019-07-08T16:45:12Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45f1252c-aac0-4044-b4a2-e51433bc37c", "record_id": "flaws_cloudtrail:0000508:45f1252c-aac0-4044-b4a2-e51433bc37c", "row_index": 508, "timestamp": "2019-07-08T16:45:12Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45f1252c-aac0-4044-b4a2-e51433bc37c", "eventTime": "2019-07-08T16:45:12Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3715d5e-ef2a-4bb9-b8b1-203596f6adc", "record_id": "flaws_cloudtrail:0000509:a3715d5e-ef2a-4bb9-b8b1-203596f6adc", "row_index": 509, "timestamp": "2019-07-08T16:45:12Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3715d5e-ef2a-4bb9-b8b1-203596f6adc", "eventTime": "2019-07-08T16:45:12Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d35c1807-15a0-4945-8ef2-7fc39499b843", "record_id": "flaws_cloudtrail:0000510:d35c1807-15a0-4945-8ef2-7fc39499b843", "row_index": 510, "timestamp": "2019-07-08T16:45:12Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d35c1807-15a0-4945-8ef2-7fc39499b843", "eventTime": "2019-07-08T16:45:12Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45f1252c-aac0-4044-b4a2-e51433bc37c", "record_id": "flaws_cloudtrail:0000511:45f1252c-aac0-4044-b4a2-e51433bc37c", "row_index": 511, "timestamp": "2019-07-08T16:45:12Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45f1252c-aac0-4044-b4a2-e51433bc37c", "eventTime": "2019-07-08T16:45:12Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3715d5e-ef2a-4bb9-b8b1-203596f6adc", "record_id": "flaws_cloudtrail:0000512:a3715d5e-ef2a-4bb9-b8b1-203596f6adc", "row_index": 512, "timestamp": "2019-07-08T16:45:12Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3715d5e-ef2a-4bb9-b8b1-203596f6adc", "eventTime": "2019-07-08T16:45:12Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54c19844-02fc-4754-9eaf-f6df16300601", "record_id": "flaws_cloudtrail:0000513:54c19844-02fc-4754-9eaf-f6df16300601", "row_index": 513, "timestamp": "2019-07-08T16:46:00Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54c19844-02fc-4754-9eaf-f6df16300601", "eventTime": "2019-07-08T16:46:00Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d45fb41-f8f7-427b-86bf-a4a7d0280164", "record_id": "flaws_cloudtrail:0000514:1d45fb41-f8f7-427b-86bf-a4a7d0280164", "row_index": 514, "timestamp": "2019-07-08T16:46:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d45fb41-f8f7-427b-86bf-a4a7d0280164", "eventTime": "2019-07-08T16:46:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54c19844-02fc-4754-9eaf-f6df16300601", "record_id": "flaws_cloudtrail:0000515:54c19844-02fc-4754-9eaf-f6df16300601", "row_index": 515, "timestamp": "2019-07-08T16:46:00Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54c19844-02fc-4754-9eaf-f6df16300601", "eventTime": "2019-07-08T16:46:00Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d45fb41-f8f7-427b-86bf-a4a7d0280164", "record_id": "flaws_cloudtrail:0000516:1d45fb41-f8f7-427b-86bf-a4a7d0280164", "row_index": 516, "timestamp": "2019-07-08T16:46:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d45fb41-f8f7-427b-86bf-a4a7d0280164", "eventTime": "2019-07-08T16:46:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef39f9b5-6955-4dc9-94b6-a9ee183b995f", "record_id": "flaws_cloudtrail:0000517:ef39f9b5-6955-4dc9-94b6-a9ee183b995f", "row_index": 517, "timestamp": "2019-07-08T16:46:15Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef39f9b5-6955-4dc9-94b6-a9ee183b995f", "eventTime": "2019-07-08T16:46:15Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a05310-3709-42a5-98e6-cb091215ec757", "record_id": "flaws_cloudtrail:0000518:d4a05310-3709-42a5-98e6-cb091215ec757", "row_index": 518, "timestamp": "2019-07-08T16:46:15Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a05310-3709-42a5-98e6-cb091215ec757", "eventTime": "2019-07-08T16:46:15Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b289edb-ef84-4934-b25f-ab9c7702d02c", "record_id": "flaws_cloudtrail:0000519:9b289edb-ef84-4934-b25f-ab9c7702d02c", "row_index": 519, "timestamp": "2019-07-08T16:46:15Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b289edb-ef84-4934-b25f-ab9c7702d02c", "eventTime": "2019-07-08T16:46:15Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef39f9b5-6955-4dc9-94b6-a9ee183b995f", "record_id": "flaws_cloudtrail:0000520:ef39f9b5-6955-4dc9-94b6-a9ee183b995f", "row_index": 520, "timestamp": "2019-07-08T16:46:15Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef39f9b5-6955-4dc9-94b6-a9ee183b995f", "eventTime": "2019-07-08T16:46:15Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a05310-3709-42a5-98e6-cb091215ec757", "record_id": "flaws_cloudtrail:0000521:d4a05310-3709-42a5-98e6-cb091215ec757", "row_index": 521, "timestamp": "2019-07-08T16:46:15Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a05310-3709-42a5-98e6-cb091215ec757", "eventTime": "2019-07-08T16:46:15Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b289edb-ef84-4934-b25f-ab9c7702d02c", "record_id": "flaws_cloudtrail:0000522:9b289edb-ef84-4934-b25f-ab9c7702d02c", "row_index": 522, "timestamp": "2019-07-08T16:46:15Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b289edb-ef84-4934-b25f-ab9c7702d02c", "eventTime": "2019-07-08T16:46:15Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec7399a9-1bf2-40b2-b9f4-369989e4156c", "record_id": "flaws_cloudtrail:0000523:ec7399a9-1bf2-40b2-b9f4-369989e4156c", "row_index": 523, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec7399a9-1bf2-40b2-b9f4-369989e4156c", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb446a6-6227-45bf-ad99-9fd16df31f37", "record_id": "flaws_cloudtrail:0000524:dfb446a6-6227-45bf-ad99-9fd16df31f37", "row_index": 524, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb446a6-6227-45bf-ad99-9fd16df31f37", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea433754-eba6-4793-8c08-4a3d382dafca", "record_id": "flaws_cloudtrail:0000525:6ea433754-eba6-4793-8c08-4a3d382dafca", "row_index": 525, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea433754-eba6-4793-8c08-4a3d382dafca", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed04294-cfec-4f5f-8e0c-339e3e0b7742", "record_id": "flaws_cloudtrail:0000526:ed04294-cfec-4f5f-8e0c-339e3e0b7742", "row_index": 526, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed04294-cfec-4f5f-8e0c-339e3e0b7742", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3191ef6-73fb-42fb-a9a3-287bfeec86bf", "record_id": "flaws_cloudtrail:0000527:f3191ef6-73fb-42fb-a9a3-287bfeec86bf", "row_index": 527, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3191ef6-73fb-42fb-a9a3-287bfeec86bf", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ad71a76-07d4-477c-8156-a06f0bd9dcc7", "record_id": "flaws_cloudtrail:0000528:7ad71a76-07d4-477c-8156-a06f0bd9dcc7", "row_index": 528, "timestamp": "2019-07-08T16:46:18Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ad71a76-07d4-477c-8156-a06f0bd9dcc7", "eventTime": "2019-07-08T16:46:18Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "464e75e1-c128-404b-8c34-3a1cb85713", "record_id": "flaws_cloudtrail:0000529:464e75e1-c128-404b-8c34-3a1cb85713", "row_index": 529, "timestamp": "2019-07-08T16:46:18Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "464e75e1-c128-404b-8c34-3a1cb85713", "eventTime": "2019-07-08T16:46:18Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d8758ed-e555-4440-81f0-758c84fe4146", "record_id": "flaws_cloudtrail:0000530:4d8758ed-e555-4440-81f0-758c84fe4146", "row_index": 530, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d8758ed-e555-4440-81f0-758c84fe4146", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec7399a9-1bf2-40b2-b9f4-369989e4156c", "record_id": "flaws_cloudtrail:0000531:ec7399a9-1bf2-40b2-b9f4-369989e4156c", "row_index": 531, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec7399a9-1bf2-40b2-b9f4-369989e4156c", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb446a6-6227-45bf-ad99-9fd16df31f37", "record_id": "flaws_cloudtrail:0000532:dfb446a6-6227-45bf-ad99-9fd16df31f37", "row_index": 532, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb446a6-6227-45bf-ad99-9fd16df31f37", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea433754-eba6-4793-8c08-4a3d382dafca", "record_id": "flaws_cloudtrail:0000533:6ea433754-eba6-4793-8c08-4a3d382dafca", "row_index": 533, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea433754-eba6-4793-8c08-4a3d382dafca", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed04294-cfec-4f5f-8e0c-339e3e0b7742", "record_id": "flaws_cloudtrail:0000534:ed04294-cfec-4f5f-8e0c-339e3e0b7742", "row_index": 534, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed04294-cfec-4f5f-8e0c-339e3e0b7742", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3191ef6-73fb-42fb-a9a3-287bfeec86bf", "record_id": "flaws_cloudtrail:0000535:f3191ef6-73fb-42fb-a9a3-287bfeec86bf", "row_index": 535, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3191ef6-73fb-42fb-a9a3-287bfeec86bf", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ad71a76-07d4-477c-8156-a06f0bd9dcc7", "record_id": "flaws_cloudtrail:0000536:7ad71a76-07d4-477c-8156-a06f0bd9dcc7", "row_index": 536, "timestamp": "2019-07-08T16:46:18Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ad71a76-07d4-477c-8156-a06f0bd9dcc7", "eventTime": "2019-07-08T16:46:18Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "464e75e1-c128-404b-8c34-3a1cb85713", "record_id": "flaws_cloudtrail:0000537:464e75e1-c128-404b-8c34-3a1cb85713", "row_index": 537, "timestamp": "2019-07-08T16:46:18Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "464e75e1-c128-404b-8c34-3a1cb85713", "eventTime": "2019-07-08T16:46:18Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d8758ed-e555-4440-81f0-758c84fe4146", "record_id": "flaws_cloudtrail:0000538:4d8758ed-e555-4440-81f0-758c84fe4146", "row_index": 538, "timestamp": "2019-07-08T16:46:18Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d8758ed-e555-4440-81f0-758c84fe4146", "eventTime": "2019-07-08T16:46:18Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e0b488-e16c-4401-8691-ba0fd5425eec", "record_id": "flaws_cloudtrail:0000539:a2e0b488-e16c-4401-8691-ba0fd5425eec", "row_index": 539, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e0b488-e16c-4401-8691-ba0fd5425eec", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02aded7a-2fa4-447d-8fb1-e6814d79693f", "record_id": "flaws_cloudtrail:0000540:02aded7a-2fa4-447d-8fb1-e6814d79693f", "row_index": 540, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02aded7a-2fa4-447d-8fb1-e6814d79693f", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16410a6a-9156-4164-bd1a-3d0563cf284f", "record_id": "flaws_cloudtrail:0000541:16410a6a-9156-4164-bd1a-3d0563cf284f", "row_index": 541, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16410a6a-9156-4164-bd1a-3d0563cf284f", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1fdb3f7-b477-4c67-803c-5bf59769e696", "record_id": "flaws_cloudtrail:0000542:e1fdb3f7-b477-4c67-803c-5bf59769e696", "row_index": 542, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1fdb3f7-b477-4c67-803c-5bf59769e696", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8253c64-25ff-44c0-bdc3-509775b7b2b4b", "record_id": "flaws_cloudtrail:0000543:c8253c64-25ff-44c0-bdc3-509775b7b2b4b", "row_index": 543, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8253c64-25ff-44c0-bdc3-509775b7b2b4b", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdd245c9-c05f-4ad2-ae2b-87b5d1c7bfda", "record_id": "flaws_cloudtrail:0000544:cdd245c9-c05f-4ad2-ae2b-87b5d1c7bfda", "row_index": 544, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdd245c9-c05f-4ad2-ae2b-87b5d1c7bfda", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293a7f16-7dae-4de4-b826-55346ef66c19", "record_id": "flaws_cloudtrail:0000545:293a7f16-7dae-4de4-b826-55346ef66c19", "row_index": 545, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293a7f16-7dae-4de4-b826-55346ef66c19", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e0b488-e16c-4401-8691-ba0fd5425eec", "record_id": "flaws_cloudtrail:0000546:a2e0b488-e16c-4401-8691-ba0fd5425eec", "row_index": 546, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e0b488-e16c-4401-8691-ba0fd5425eec", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02aded7a-2fa4-447d-8fb1-e6814d79693f", "record_id": "flaws_cloudtrail:0000547:02aded7a-2fa4-447d-8fb1-e6814d79693f", "row_index": 547, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02aded7a-2fa4-447d-8fb1-e6814d79693f", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16410a6a-9156-4164-bd1a-3d0563cf284f", "record_id": "flaws_cloudtrail:0000548:16410a6a-9156-4164-bd1a-3d0563cf284f", "row_index": 548, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16410a6a-9156-4164-bd1a-3d0563cf284f", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1fdb3f7-b477-4c67-803c-5bf59769e696", "record_id": "flaws_cloudtrail:0000549:e1fdb3f7-b477-4c67-803c-5bf59769e696", "row_index": 549, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1fdb3f7-b477-4c67-803c-5bf59769e696", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8253c64-25ff-44c0-bdc3-509775b7b2b4b", "record_id": "flaws_cloudtrail:0000550:c8253c64-25ff-44c0-bdc3-509775b7b2b4b", "row_index": 550, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8253c64-25ff-44c0-bdc3-509775b7b2b4b", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdd245c9-c05f-4ad2-ae2b-87b5d1c7bfda", "record_id": "flaws_cloudtrail:0000551:cdd245c9-c05f-4ad2-ae2b-87b5d1c7bfda", "row_index": 551, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdd245c9-c05f-4ad2-ae2b-87b5d1c7bfda", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "293a7f16-7dae-4de4-b826-55346ef66c19", "record_id": "flaws_cloudtrail:0000552:293a7f16-7dae-4de4-b826-55346ef66c19", "row_index": 552, "timestamp": "2019-07-08T16:46:19Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "293a7f16-7dae-4de4-b826-55346ef66c19", "eventTime": "2019-07-08T16:46:19Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a008ef1-aee6-4424-956e-fc8c966fdd5c", "record_id": "flaws_cloudtrail:0000553:9a008ef1-aee6-4424-956e-fc8c966fdd5c", "row_index": 553, "timestamp": "2019-07-08T16:47:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a008ef1-aee6-4424-956e-fc8c966fdd5c", "eventTime": "2019-07-08T16:47:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d23941-4605-4ec3-979c-cdadd01b1281", "record_id": "flaws_cloudtrail:0000554:d23941-4605-4ec3-979c-cdadd01b1281", "row_index": 554, "timestamp": "2019-07-08T16:47:03Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d23941-4605-4ec3-979c-cdadd01b1281", "eventTime": "2019-07-08T16:47:03Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526bd711-723c-49f6-85ea-f884948ce711", "record_id": "flaws_cloudtrail:0000555:526bd711-723c-49f6-85ea-f884948ce711", "row_index": 555, "timestamp": "2019-07-08T16:47:03Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526bd711-723c-49f6-85ea-f884948ce711", "eventTime": "2019-07-08T16:47:03Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a008ef1-aee6-4424-956e-fc8c966fdd5c", "record_id": "flaws_cloudtrail:0000556:9a008ef1-aee6-4424-956e-fc8c966fdd5c", "row_index": 556, "timestamp": "2019-07-08T16:47:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a008ef1-aee6-4424-956e-fc8c966fdd5c", "eventTime": "2019-07-08T16:47:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d23941-4605-4ec3-979c-cdadd01b1281", "record_id": "flaws_cloudtrail:0000557:d23941-4605-4ec3-979c-cdadd01b1281", "row_index": 557, "timestamp": "2019-07-08T16:47:03Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d23941-4605-4ec3-979c-cdadd01b1281", "eventTime": "2019-07-08T16:47:03Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526bd711-723c-49f6-85ea-f884948ce711", "record_id": "flaws_cloudtrail:0000558:526bd711-723c-49f6-85ea-f884948ce711", "row_index": 558, "timestamp": "2019-07-08T16:47:03Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526bd711-723c-49f6-85ea-f884948ce711", "eventTime": "2019-07-08T16:47:03Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e0a476-e0a7-42ab-8093-0c6cf18e45f0", "record_id": "flaws_cloudtrail:0000559:64e0a476-e0a7-42ab-8093-0c6cf18e45f0", "row_index": 559, "timestamp": "2019-07-08T16:47:06Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e0a476-e0a7-42ab-8093-0c6cf18e45f0", "eventTime": "2019-07-08T16:47:06Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1afc304-ee5a-46ea-bf9f-8dd9f7041b57", "record_id": "flaws_cloudtrail:0000560:a1afc304-ee5a-46ea-bf9f-8dd9f7041b57", "row_index": 560, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1afc304-ee5a-46ea-bf9f-8dd9f7041b57", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "225dc410-4647-439e-b181-eec7baf7510b", "record_id": "flaws_cloudtrail:0000561:225dc410-4647-439e-b181-eec7baf7510b", "row_index": 561, "timestamp": "2019-07-08T16:47:06Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "225dc410-4647-439e-b181-eec7baf7510b", "eventTime": "2019-07-08T16:47:06Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d984d01b-4abf-404a-b1cc-6a4caa2bb843", "record_id": "flaws_cloudtrail:0000562:d984d01b-4abf-404a-b1cc-6a4caa2bb843", "row_index": 562, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d984d01b-4abf-404a-b1cc-6a4caa2bb843", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be98ecb3-12cd-4259-a7b1-4fa044b17c10", "record_id": "flaws_cloudtrail:0000563:be98ecb3-12cd-4259-a7b1-4fa044b17c10", "row_index": 563, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be98ecb3-12cd-4259-a7b1-4fa044b17c10", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17632d3-490d-4cba-bc43-93272f674", "record_id": "flaws_cloudtrail:0000564:17632d3-490d-4cba-bc43-93272f674", "row_index": 564, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17632d3-490d-4cba-bc43-93272f674", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45426dd-5fab-4541-9d78-b252a00c4515", "record_id": "flaws_cloudtrail:0000565:45426dd-5fab-4541-9d78-b252a00c4515", "row_index": 565, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45426dd-5fab-4541-9d78-b252a00c4515", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58dbda50-59d9-4445-bc8a-196dfd24724b", "record_id": "flaws_cloudtrail:0000566:58dbda50-59d9-4445-bc8a-196dfd24724b", "row_index": 566, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58dbda50-59d9-4445-bc8a-196dfd24724b", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64e0a476-e0a7-42ab-8093-0c6cf18e45f0", "record_id": "flaws_cloudtrail:0000567:64e0a476-e0a7-42ab-8093-0c6cf18e45f0", "row_index": 567, "timestamp": "2019-07-08T16:47:06Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64e0a476-e0a7-42ab-8093-0c6cf18e45f0", "eventTime": "2019-07-08T16:47:06Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1afc304-ee5a-46ea-bf9f-8dd9f7041b57", "record_id": "flaws_cloudtrail:0000568:a1afc304-ee5a-46ea-bf9f-8dd9f7041b57", "row_index": 568, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1afc304-ee5a-46ea-bf9f-8dd9f7041b57", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "225dc410-4647-439e-b181-eec7baf7510b", "record_id": "flaws_cloudtrail:0000569:225dc410-4647-439e-b181-eec7baf7510b", "row_index": 569, "timestamp": "2019-07-08T16:47:06Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "225dc410-4647-439e-b181-eec7baf7510b", "eventTime": "2019-07-08T16:47:06Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d984d01b-4abf-404a-b1cc-6a4caa2bb843", "record_id": "flaws_cloudtrail:0000570:d984d01b-4abf-404a-b1cc-6a4caa2bb843", "row_index": 570, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d984d01b-4abf-404a-b1cc-6a4caa2bb843", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be98ecb3-12cd-4259-a7b1-4fa044b17c10", "record_id": "flaws_cloudtrail:0000571:be98ecb3-12cd-4259-a7b1-4fa044b17c10", "row_index": 571, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be98ecb3-12cd-4259-a7b1-4fa044b17c10", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17632d3-490d-4cba-bc43-93272f674", "record_id": "flaws_cloudtrail:0000572:17632d3-490d-4cba-bc43-93272f674", "row_index": 572, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17632d3-490d-4cba-bc43-93272f674", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45426dd-5fab-4541-9d78-b252a00c4515", "record_id": "flaws_cloudtrail:0000573:45426dd-5fab-4541-9d78-b252a00c4515", "row_index": 573, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45426dd-5fab-4541-9d78-b252a00c4515", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58dbda50-59d9-4445-bc8a-196dfd24724b", "record_id": "flaws_cloudtrail:0000574:58dbda50-59d9-4445-bc8a-196dfd24724b", "row_index": 574, "timestamp": "2019-07-08T16:47:06Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58dbda50-59d9-4445-bc8a-196dfd24724b", "eventTime": "2019-07-08T16:47:06Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba97896e-0e89-4471-aae1-a1d8b53149", "record_id": "flaws_cloudtrail:0000575:ba97896e-0e89-4471-aae1-a1d8b53149", "row_index": 575, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba97896e-0e89-4471-aae1-a1d8b53149", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "705a8a43-81f8-4995-9f0c-5fccba71b247", "record_id": "flaws_cloudtrail:0000576:705a8a43-81f8-4995-9f0c-5fccba71b247", "row_index": 576, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "705a8a43-81f8-4995-9f0c-5fccba71b247", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00e19a57-be8c-4224-aaf1-e70b54b5fc47", "record_id": "flaws_cloudtrail:0000577:00e19a57-be8c-4224-aaf1-e70b54b5fc47", "row_index": 577, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00e19a57-be8c-4224-aaf1-e70b54b5fc47", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "050a4aca-b9ec-42e4-adc6-57bd049eb2d6", "record_id": "flaws_cloudtrail:0000578:050a4aca-b9ec-42e4-adc6-57bd049eb2d6", "row_index": 578, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "050a4aca-b9ec-42e4-adc6-57bd049eb2d6", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c383554-12ff-4a90-8e99-39711dab2", "record_id": "flaws_cloudtrail:0000579:e0c383554-12ff-4a90-8e99-39711dab2", "row_index": 579, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c383554-12ff-4a90-8e99-39711dab2", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ed91a2-c598-40fe-9e9e-1e15ed237046", "record_id": "flaws_cloudtrail:0000580:c9ed91a2-c598-40fe-9e9e-1e15ed237046", "row_index": 580, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ed91a2-c598-40fe-9e9e-1e15ed237046", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e170c36-931c-4dec-a753-80e12bd127199", "record_id": "flaws_cloudtrail:0000581:0e170c36-931c-4dec-a753-80e12bd127199", "row_index": 581, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e170c36-931c-4dec-a753-80e12bd127199", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba97896e-0e89-4471-aae1-a1d8b53149", "record_id": "flaws_cloudtrail:0000582:ba97896e-0e89-4471-aae1-a1d8b53149", "row_index": 582, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListServiceSpecificCredentials", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba97896e-0e89-4471-aae1-a1d8b53149", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListServiceSpecificCredentials", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "705a8a43-81f8-4995-9f0c-5fccba71b247", "record_id": "flaws_cloudtrail:0000583:705a8a43-81f8-4995-9f0c-5fccba71b247", "row_index": 583, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "705a8a43-81f8-4995-9f0c-5fccba71b247", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00e19a57-be8c-4224-aaf1-e70b54b5fc47", "record_id": "flaws_cloudtrail:0000584:00e19a57-be8c-4224-aaf1-e70b54b5fc47", "row_index": 584, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00e19a57-be8c-4224-aaf1-e70b54b5fc47", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "050a4aca-b9ec-42e4-adc6-57bd049eb2d6", "record_id": "flaws_cloudtrail:0000585:050a4aca-b9ec-42e4-adc6-57bd049eb2d6", "row_index": 585, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "050a4aca-b9ec-42e4-adc6-57bd049eb2d6", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c383554-12ff-4a90-8e99-39711dab2", "record_id": "flaws_cloudtrail:0000586:e0c383554-12ff-4a90-8e99-39711dab2", "row_index": 586, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c383554-12ff-4a90-8e99-39711dab2", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ed91a2-c598-40fe-9e9e-1e15ed237046", "record_id": "flaws_cloudtrail:0000587:c9ed91a2-c598-40fe-9e9e-1e15ed237046", "row_index": 587, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ed91a2-c598-40fe-9e9e-1e15ed237046", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e170c36-931c-4dec-a753-80e12bd127199", "record_id": "flaws_cloudtrail:0000588:0e170c36-931c-4dec-a753-80e12bd127199", "row_index": 588, "timestamp": "2019-07-08T16:47:07Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e170c36-931c-4dec-a753-80e12bd127199", "eventTime": "2019-07-08T16:47:07Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3e394f5-e580-44bd-a39e-63cc6a66cd72", "record_id": "flaws_cloudtrail:0000589:d3e394f5-e580-44bd-a39e-63cc6a66cd72", "row_index": 589, "timestamp": "2019-07-08T16:55:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3e394f5-e580-44bd-a39e-63cc6a66cd72", "eventTime": "2019-07-08T16:55:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ffe7e2f-fc7c-4487-ada3-3c3ea849d25d", "record_id": "flaws_cloudtrail:0000590:5ffe7e2f-fc7c-4487-ada3-3c3ea849d25d", "row_index": 590, "timestamp": "2019-07-08T16:55:26Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ffe7e2f-fc7c-4487-ada3-3c3ea849d25d", "eventTime": "2019-07-08T16:55:26Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3ab7cc-6bd3-4200-95f7-f7c8289fa24c", "record_id": "flaws_cloudtrail:0000591:ba3ab7cc-6bd3-4200-95f7-f7c8289fa24c", "row_index": 591, "timestamp": "2019-07-08T16:56:14Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3ab7cc-6bd3-4200-95f7-f7c8289fa24c", "eventTime": "2019-07-08T16:56:14Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af8d0c9-3f1b-4d63-b9c0-6635026a8289", "record_id": "flaws_cloudtrail:0000592:0af8d0c9-3f1b-4d63-b9c0-6635026a8289", "row_index": 592, "timestamp": "2019-07-08T16:57:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 545, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af8d0c9-3f1b-4d63-b9c0-6635026a8289", "eventTime": "2019-07-08T16:57:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63fac829-b5c0-4723-a7ee-1d0781bd09c5", "record_id": "flaws_cloudtrail:0000593:63fac829-b5c0-4723-a7ee-1d0781bd09c5", "row_index": 593, "timestamp": "2019-07-08T16:58:25Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63fac829-b5c0-4723-a7ee-1d0781bd09c5", "eventTime": "2019-07-08T16:58:25Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fbf8359-8594-4c92-9460-1a90c3400707", "record_id": "flaws_cloudtrail:0000594:7fbf8359-8594-4c92-9460-1a90c3400707", "row_index": 594, "timestamp": "2019-07-08T16:59:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fbf8359-8594-4c92-9460-1a90c3400707", "eventTime": "2019-07-08T16:59:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc98fc5-4c0a-4cdb-8371-c99f4bcf3d06", "record_id": "flaws_cloudtrail:0000595:2fc98fc5-4c0a-4cdb-8371-c99f4bcf3d06", "row_index": 595, "timestamp": "2019-07-08T17:00:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 508, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc98fc5-4c0a-4cdb-8371-c99f4bcf3d06", "eventTime": "2019-07-08T17:00:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd244182-be92-42d2-b57f-d0f01a2f2c3b", "record_id": "flaws_cloudtrail:0000596:fd244182-be92-42d2-b57f-d0f01a2f2c3b", "row_index": 596, "timestamp": "2019-07-08T17:01:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 518, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd244182-be92-42d2-b57f-d0f01a2f2c3b", "eventTime": "2019-07-08T17:01:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2b5feed-4fc5-4535-9752-66297908de90", "record_id": "flaws_cloudtrail:0000597:d2b5feed-4fc5-4535-9752-66297908de90", "row_index": 597, "timestamp": "2019-07-08T17:02:59Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 512, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2b5feed-4fc5-4535-9752-66297908de90", "eventTime": "2019-07-08T17:02:59Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37103b3b-d527-4366-a968-a69850d69a6c", "record_id": "flaws_cloudtrail:0000598:37103b3b-d527-4366-a968-a69850d69a6c", "row_index": 598, "timestamp": "2019-07-08T17:03:41Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 506, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37103b3b-d527-4366-a968-a69850d69a6c", "eventTime": "2019-07-08T17:03:41Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e968147d-7927-46a6-9b2d-c4e5d8c64d23", "record_id": "flaws_cloudtrail:0000599:e968147d-7927-46a6-9b2d-c4e5d8c64d23", "row_index": 599, "timestamp": "2019-07-08T17:04:23Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 512, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e968147d-7927-46a6-9b2d-c4e5d8c64d23", "eventTime": "2019-07-08T17:04:23Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c11a13ad-13d6-4886-81b6-6d139330d4d2", "record_id": "flaws_cloudtrail:0000600:c11a13ad-13d6-4886-81b6-6d139330d4d2", "row_index": 600, "timestamp": "2019-07-08T17:06:23Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAA7MLFUV9FI46DLXK", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "75.157.20.159", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 515, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c11a13ad-13d6-4886-81b6-6d139330d4d2", "eventTime": "2019-07-08T17:06:23Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.157.20.159", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAA7MLFUV9FI46DLXK", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153502ac9-1491-4352-b82f-dbc9f9bb7aab", "record_id": "flaws_cloudtrail:0000601:153502ac9-1491-4352-b82f-dbc9f9bb7aab", "row_index": 601, "timestamp": "2019-07-08T17:12:49Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153502ac9-1491-4352-b82f-dbc9f9bb7aab", "eventTime": "2019-07-08T17:12:49Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153502ac9-1491-4352-b82f-dbc9f9bb7aab", "record_id": "flaws_cloudtrail:0000602:153502ac9-1491-4352-b82f-dbc9f9bb7aab", "row_index": 602, "timestamp": "2019-07-08T17:12:49Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153502ac9-1491-4352-b82f-dbc9f9bb7aab", "eventTime": "2019-07-08T17:12:49Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1be219e8-1daf-43c4-9240-a2f70ad95511", "record_id": "flaws_cloudtrail:0000603:1be219e8-1daf-43c4-9240-a2f70ad95511", "row_index": 603, "timestamp": "2019-07-08T17:29:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1be219e8-1daf-43c4-9240-a2f70ad95511", "eventTime": "2019-07-08T17:29:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAINO2MFNSP8DZNFL2", "expiration": "Jul 8, 2019 11:38:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1be219e8-1daf-43c4-9240-a2f70ad95511", "record_id": "flaws_cloudtrail:0000604:1be219e8-1daf-43c4-9240-a2f70ad95511", "row_index": 604, "timestamp": "2019-07-08T17:29:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1868, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1be219e8-1daf-43c4-9240-a2f70ad95511", "eventTime": "2019-07-08T17:29:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAINO2MFNSP8DZNFL2", "expiration": "Jul 8, 2019 11:38:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a559ce-501c-45df-9821-6ca006cf9bf5", "record_id": "flaws_cloudtrail:0000605:b1a559ce-501c-45df-9821-6ca006cf9bf5", "row_index": 605, "timestamp": "2019-07-08T17:58:34Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a559ce-501c-45df-9821-6ca006cf9bf5", "eventTime": "2019-07-08T17:58:34Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a559ce-501c-45df-9821-6ca006cf9bf5", "record_id": "flaws_cloudtrail:0000606:b1a559ce-501c-45df-9821-6ca006cf9bf5", "row_index": 606, "timestamp": "2019-07-08T17:58:34Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a559ce-501c-45df-9821-6ca006cf9bf5", "eventTime": "2019-07-08T17:58:34Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed4e94e9-9f8b-4711-a57a-960c2dbdcc78", "record_id": "flaws_cloudtrail:0000607:ed4e94e9-9f8b-4711-a57a-960c2dbdcc78", "row_index": 607, "timestamp": "2019-07-08T17:59:26Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed4e94e9-9f8b-4711-a57a-960c2dbdcc78", "eventTime": "2019-07-08T17:59:26Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9da288de-153a-4327-b68f-6719c41787e0", "record_id": "flaws_cloudtrail:0000608:9da288de-153a-4327-b68f-6719c41787e0", "row_index": 608, "timestamp": "2019-07-08T17:59:26Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9da288de-153a-4327-b68f-6719c41787e0", "eventTime": "2019-07-08T17:59:26Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed4e94e9-9f8b-4711-a57a-960c2dbdcc78", "record_id": "flaws_cloudtrail:0000609:ed4e94e9-9f8b-4711-a57a-960c2dbdcc78", "row_index": 609, "timestamp": "2019-07-08T17:59:26Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed4e94e9-9f8b-4711-a57a-960c2dbdcc78", "eventTime": "2019-07-08T17:59:26Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9da288de-153a-4327-b68f-6719c41787e0", "record_id": "flaws_cloudtrail:0000610:9da288de-153a-4327-b68f-6719c41787e0", "row_index": 610, "timestamp": "2019-07-08T17:59:26Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9da288de-153a-4327-b68f-6719c41787e0", "eventTime": "2019-07-08T17:59:26Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b23522-566a-4b55-9352-c7a279d4f8a9", "record_id": "flaws_cloudtrail:0000611:1b23522-566a-4b55-9352-c7a279d4f8a9", "row_index": 611, "timestamp": "2019-07-08T17:59:27Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.52.31.206", "user_agent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b23522-566a-4b55-9352-c7a279d4f8a9", "eventTime": "2019-07-08T17:59:27Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.52.31.206", "userAgent": "Boto3/1.9.171 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 Botocore/1.12.171", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}