Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75137f3d-eb8f-4840-9b21-a213ad19022c", "record_id": "flaws_cloudtrail:0000000:75137f3d-eb8f-4840-9b21-a213ad19022c", "row_index": 0, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75137f3d-eb8f-4840-9b21-a213ad19022c", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77e5209d-4953-49f3-ad42-dcef5cbc7e80", "record_id": "flaws_cloudtrail:0000001:77e5209d-4953-49f3-ad42-dcef5cbc7e80", "row_index": 1, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77e5209d-4953-49f3-ad42-dcef5cbc7e80", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3325bcf4-702a-4841-8147-f9160c3bc5a4", "record_id": "flaws_cloudtrail:0000002:3325bcf4-702a-4841-8147-f9160c3bc5a4", "row_index": 2, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3325bcf4-702a-4841-8147-f9160c3bc5a4", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "187f0c12-0bd0-43f2-a664-f1eb628f5bb6", "record_id": "flaws_cloudtrail:0000003:187f0c12-0bd0-43f2-a664-f1eb628f5bb6", "row_index": 3, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "187f0c12-0bd0-43f2-a664-f1eb628f5bb6", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9fd4de9-2f1d-4313-ab60-b1b9b42375c", "record_id": "flaws_cloudtrail:0000004:f9fd4de9-2f1d-4313-ab60-b1b9b42375c", "row_index": 4, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9fd4de9-2f1d-4313-ab60-b1b9b42375c", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29dbc425-5c66-4430-85e4-6018af36cc97", "record_id": "flaws_cloudtrail:0000005:29dbc425-5c66-4430-85e4-6018af36cc97", "row_index": 5, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29dbc425-5c66-4430-85e4-6018af36cc97", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2212a5f-2122-4be2-bf0a-bb9880d1d541", "record_id": "flaws_cloudtrail:0000006:c2212a5f-2122-4be2-bf0a-bb9880d1d541", "row_index": 6, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2212a5f-2122-4be2-bf0a-bb9880d1d541", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8345e17d-a3a0-4ea1-a768-d09f725b6f7e", "record_id": "flaws_cloudtrail:0000007:8345e17d-a3a0-4ea1-a768-d09f725b6f7e", "row_index": 7, "timestamp": "2018-12-08T14:37:45Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8345e17d-a3a0-4ea1-a768-d09f725b6f7e", "eventTime": "2018-12-08T14:37:45Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef2be52-9587-4362-8022-42f7f0e31aed", "record_id": "flaws_cloudtrail:0000008:eef2be52-9587-4362-8022-42f7f0e31aed", "row_index": 8, "timestamp": "2018-12-08T14:37:46Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef2be52-9587-4362-8022-42f7f0e31aed", "eventTime": "2018-12-08T14:37:46Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb183b8-9dfb-42b0-8bb1-5cb4b67c7068", "record_id": "flaws_cloudtrail:0000009:2cb183b8-9dfb-42b0-8bb1-5cb4b67c7068", "row_index": 9, "timestamp": "2018-12-08T14:37:46Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb183b8-9dfb-42b0-8bb1-5cb4b67c7068", "eventTime": "2018-12-08T14:37:46Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d2a6d53-0454-4d55-8d65-f7ccb9a707a7", "record_id": "flaws_cloudtrail:0000010:7d2a6d53-0454-4d55-8d65-f7ccb9a707a7", "row_index": 10, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d2a6d53-0454-4d55-8d65-f7ccb9a707a7", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2107eda9-1f8d-4a7f-80e9-1cb65793efa7", "record_id": "flaws_cloudtrail:0000011:2107eda9-1f8d-4a7f-80e9-1cb65793efa7", "row_index": 11, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2107eda9-1f8d-4a7f-80e9-1cb65793efa7", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37a7c6c4-3f64-412a-ad04-5df4994f9713", "record_id": "flaws_cloudtrail:0000012:37a7c6c4-3f64-412a-ad04-5df4994f9713", "row_index": 12, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37a7c6c4-3f64-412a-ad04-5df4994f9713", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f427484-48cb-4810-b12e-39addf39470d", "record_id": "flaws_cloudtrail:0000013:87f427484-48cb-4810-b12e-39addf39470d", "row_index": 13, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f427484-48cb-4810-b12e-39addf39470d", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24db6078-7280-4ebc-9d3d-5c2886a60c46", "record_id": "flaws_cloudtrail:0000014:24db6078-7280-4ebc-9d3d-5c2886a60c46", "row_index": 14, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24db6078-7280-4ebc-9d3d-5c2886a60c46", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ad7940-0bf7-4569-ae4b-198850ec8337", "record_id": "flaws_cloudtrail:0000015:b7ad7940-0bf7-4569-ae4b-198850ec8337", "row_index": 15, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ad7940-0bf7-4569-ae4b-198850ec8337", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4f10c06-bd7e-437d-bce5-9d45c663007", "record_id": "flaws_cloudtrail:0000016:b4f10c06-bd7e-437d-bce5-9d45c663007", "row_index": 16, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4f10c06-bd7e-437d-bce5-9d45c663007", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2762aabc-67d5-4ff8-9a58-75982e07a885", "record_id": "flaws_cloudtrail:0000017:2762aabc-67d5-4ff8-9a58-75982e07a885", "row_index": 17, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2762aabc-67d5-4ff8-9a58-75982e07a885", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72e8a67-c356-46f3-8ef6-3d309825f8", "record_id": "flaws_cloudtrail:0000018:b72e8a67-c356-46f3-8ef6-3d309825f8", "row_index": 18, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72e8a67-c356-46f3-8ef6-3d309825f8", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83fff1e6-c0bc-4b06-a86e-3836c1dcc03b", "record_id": "flaws_cloudtrail:0000019:83fff1e6-c0bc-4b06-a86e-3836c1dcc03b", "row_index": 19, "timestamp": "2018-12-08T14:37:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83fff1e6-c0bc-4b06-a86e-3836c1dcc03b", "eventTime": "2018-12-08T14:37:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fd542ab-a907-486b-90d6-4c440fe32288", "record_id": "flaws_cloudtrail:0000020:5fd542ab-a907-486b-90d6-4c440fe32288", "row_index": 20, "timestamp": "2018-12-08T14:37:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fd542ab-a907-486b-90d6-4c440fe32288", "eventTime": "2018-12-08T14:37:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1268c7b6-ac8e-4f46-ad16-33128c53e628", "record_id": "flaws_cloudtrail:0000021:1268c7b6-ac8e-4f46-ad16-33128c53e628", "row_index": 21, "timestamp": "2018-12-08T14:37:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1268c7b6-ac8e-4f46-ad16-33128c53e628", "eventTime": "2018-12-08T14:37:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfe3191-4c08-4ac7-9b36-9c06c06ea51f", "record_id": "flaws_cloudtrail:0000022:7bfe3191-4c08-4ac7-9b36-9c06c06ea51f", "row_index": 22, "timestamp": "2018-12-08T14:37:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfe3191-4c08-4ac7-9b36-9c06c06ea51f", "eventTime": "2018-12-08T14:37:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ee54f3b-6b40-49bd-92d1-40e1ba09fed1", "record_id": "flaws_cloudtrail:0000023:3ee54f3b-6b40-49bd-92d1-40e1ba09fed1", "row_index": 23, "timestamp": "2018-12-08T14:37:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ee54f3b-6b40-49bd-92d1-40e1ba09fed1", "eventTime": "2018-12-08T14:37:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7ed588-47d4-43af-84ae-ff9623205594", "record_id": "flaws_cloudtrail:0000024:8e7ed588-47d4-43af-84ae-ff9623205594", "row_index": 24, "timestamp": "2018-12-08T14:37:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7ed588-47d4-43af-84ae-ff9623205594", "eventTime": "2018-12-08T14:37:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baad5476-1a9d-46b0-ab03-c855f57d1245", "record_id": "flaws_cloudtrail:0000025:baad5476-1a9d-46b0-ab03-c855f57d1245", "row_index": 25, "timestamp": "2018-12-08T14:37:51Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baad5476-1a9d-46b0-ab03-c855f57d1245", "eventTime": "2018-12-08T14:37:51Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f0dccf1-9039-4a64-a31d-373899b69b3c", "record_id": "flaws_cloudtrail:0000026:8f0dccf1-9039-4a64-a31d-373899b69b3c", "row_index": 26, "timestamp": "2018-12-08T14:37:51Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f0dccf1-9039-4a64-a31d-373899b69b3c", "eventTime": "2018-12-08T14:37:51Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "840b20a0-8ebd-4162-b93d-f7f214023221", "record_id": "flaws_cloudtrail:0000027:840b20a0-8ebd-4162-b93d-f7f214023221", "row_index": 27, "timestamp": "2018-12-08T14:37:51Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "840b20a0-8ebd-4162-b93d-f7f214023221", "eventTime": "2018-12-08T14:37:51Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033281a3f-3ea3-41f2-9f66-3c8d33ef5732", "record_id": "flaws_cloudtrail:0000028:033281a3f-3ea3-41f2-9f66-3c8d33ef5732", "row_index": 28, "timestamp": "2018-12-08T14:37:51Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033281a3f-3ea3-41f2-9f66-3c8d33ef5732", "eventTime": "2018-12-08T14:37:51Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c545b888-1bfd-4b16-9f09-f613128", "record_id": "flaws_cloudtrail:0000029:c545b888-1bfd-4b16-9f09-f613128", "row_index": 29, "timestamp": "2018-12-08T14:37:51Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c545b888-1bfd-4b16-9f09-f613128", "eventTime": "2018-12-08T14:37:51Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ac9e39e-8df7-4bfc-a33c-a3715ab06630", "record_id": "flaws_cloudtrail:0000030:5ac9e39e-8df7-4bfc-a33c-a3715ab06630", "row_index": 30, "timestamp": "2018-12-08T14:37:51Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ac9e39e-8df7-4bfc-a33c-a3715ab06630", "eventTime": "2018-12-08T14:37:51Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fa0911a-0653-4f33-bff8-7716f285e8e6", "record_id": "flaws_cloudtrail:0000031:7fa0911a-0653-4f33-bff8-7716f285e8e6", "row_index": 31, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fa0911a-0653-4f33-bff8-7716f285e8e6", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db1b43dd-a28c-4cea-8584-c42a4a16b352", "record_id": "flaws_cloudtrail:0000032:db1b43dd-a28c-4cea-8584-c42a4a16b352", "row_index": 32, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db1b43dd-a28c-4cea-8584-c42a4a16b352", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38220b0-b086-4023-8a72-7568af3bf647", "record_id": "flaws_cloudtrail:0000033:b38220b0-b086-4023-8a72-7568af3bf647", "row_index": 33, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38220b0-b086-4023-8a72-7568af3bf647", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca212431-2b3c-4f94-b936-0a6a8e16eb97", "record_id": "flaws_cloudtrail:0000034:7ca212431-2b3c-4f94-b936-0a6a8e16eb97", "row_index": 34, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca212431-2b3c-4f94-b936-0a6a8e16eb97", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99207a-81f7-4a85-90ee-e7bb67acb3ce", "record_id": "flaws_cloudtrail:0000035:c99207a-81f7-4a85-90ee-e7bb67acb3ce", "row_index": 35, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99207a-81f7-4a85-90ee-e7bb67acb3ce", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33a9d59b-74da-4722-97ce-8b84056f5f3c", "record_id": "flaws_cloudtrail:0000036:33a9d59b-74da-4722-97ce-8b84056f5f3c", "row_index": 36, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33a9d59b-74da-4722-97ce-8b84056f5f3c", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c8412f3-4122-4d14-9853-414399a739ee0", "record_id": "flaws_cloudtrail:0000037:7c8412f3-4122-4d14-9853-414399a739ee0", "row_index": 37, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c8412f3-4122-4d14-9853-414399a739ee0", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffed4a92-518b-4f5e-8c86-4c95dac324d3", "record_id": "flaws_cloudtrail:0000038:ffed4a92-518b-4f5e-8c86-4c95dac324d3", "row_index": 38, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffed4a92-518b-4f5e-8c86-4c95dac324d3", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "022d00a7-fc3a-4e31-a444-4ae60e4cb27d", "record_id": "flaws_cloudtrail:0000039:022d00a7-fc3a-4e31-a444-4ae60e4cb27d", "row_index": 39, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "022d00a7-fc3a-4e31-a444-4ae60e4cb27d", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bf4826d-accd-4feb-ac1f-3ecd1abe8e26", "record_id": "flaws_cloudtrail:0000040:5bf4826d-accd-4feb-ac1f-3ecd1abe8e26", "row_index": 40, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bf4826d-accd-4feb-ac1f-3ecd1abe8e26", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604b736b-214f-4b18-8d07-77bf321fa32d", "record_id": "flaws_cloudtrail:0000041:604b736b-214f-4b18-8d07-77bf321fa32d", "row_index": 41, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604b736b-214f-4b18-8d07-77bf321fa32d", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3ce70d6-2a7c-4640-86ac-c06185017392", "record_id": "flaws_cloudtrail:0000042:f3ce70d6-2a7c-4640-86ac-c06185017392", "row_index": 42, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3ce70d6-2a7c-4640-86ac-c06185017392", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756f40fb-cd30-4bdd-ac99-6c05f434082f", "record_id": "flaws_cloudtrail:0000043:756f40fb-cd30-4bdd-ac99-6c05f434082f", "row_index": 43, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756f40fb-cd30-4bdd-ac99-6c05f434082f", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692dea98-4aa8-4da8-a0af-658dc0b9ca7c", "record_id": "flaws_cloudtrail:0000044:692dea98-4aa8-4da8-a0af-658dc0b9ca7c", "row_index": 44, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692dea98-4aa8-4da8-a0af-658dc0b9ca7c", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0136b2f4-adea-4121-b0f4-2da0516d20ad", "record_id": "flaws_cloudtrail:0000045:0136b2f4-adea-4121-b0f4-2da0516d20ad", "row_index": 45, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0136b2f4-adea-4121-b0f4-2da0516d20ad", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3f8c3b6-7d5f-4758-b7fa-a85da2598f90", "record_id": "flaws_cloudtrail:0000046:c3f8c3b6-7d5f-4758-b7fa-a85da2598f90", "row_index": 46, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3f8c3b6-7d5f-4758-b7fa-a85da2598f90", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d9b7269-12d0-40fa-8141-ba0ddb7aa2b2", "record_id": "flaws_cloudtrail:0000047:3d9b7269-12d0-40fa-8141-ba0ddb7aa2b2", "row_index": 47, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d9b7269-12d0-40fa-8141-ba0ddb7aa2b2", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb4ce7aa-5374-47de-ae95-1ad7570f0c89", "record_id": "flaws_cloudtrail:0000048:cb4ce7aa-5374-47de-ae95-1ad7570f0c89", "row_index": 48, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb4ce7aa-5374-47de-ae95-1ad7570f0c89", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d71f5073-c84e-4e53-b45f-8ca4eed8d113", "record_id": "flaws_cloudtrail:0000049:d71f5073-c84e-4e53-b45f-8ca4eed8d113", "row_index": 49, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d71f5073-c84e-4e53-b45f-8ca4eed8d113", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c685b87-851e-49b3-a145-1cc2e49ad2b1", "record_id": "flaws_cloudtrail:0000050:2c685b87-851e-49b3-a145-1cc2e49ad2b1", "row_index": 50, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c685b87-851e-49b3-a145-1cc2e49ad2b1", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9689a1-cadb-4277-b9fa-86bc109f4eed", "record_id": "flaws_cloudtrail:0000051:9d9689a1-cadb-4277-b9fa-86bc109f4eed", "row_index": 51, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9689a1-cadb-4277-b9fa-86bc109f4eed", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff335265-7b22-4341-a771-d49bb3f8f27a", "record_id": "flaws_cloudtrail:0000052:bff335265-7b22-4341-a771-d49bb3f8f27a", "row_index": 52, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff335265-7b22-4341-a771-d49bb3f8f27a", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b71cbd65-5783-4f05-97d2-eb187df58af9", "record_id": "flaws_cloudtrail:0000053:b71cbd65-5783-4f05-97d2-eb187df58af9", "row_index": 53, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b71cbd65-5783-4f05-97d2-eb187df58af9", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76f9d029-ca7a-43ee-a122-52e6b58822c0", "record_id": "flaws_cloudtrail:0000054:76f9d029-ca7a-43ee-a122-52e6b58822c0", "row_index": 54, "timestamp": "2018-12-08T14:37:52Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76f9d029-ca7a-43ee-a122-52e6b58822c0", "eventTime": "2018-12-08T14:37:52Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453b8ad2-aa83-4366-a17f-a97802e15eb8", "record_id": "flaws_cloudtrail:0000055:453b8ad2-aa83-4366-a17f-a97802e15eb8", "row_index": 55, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453b8ad2-aa83-4366-a17f-a97802e15eb8", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003ed61e-7403-4930-9987-33e373094eafc", "record_id": "flaws_cloudtrail:0000056:003ed61e-7403-4930-9987-33e373094eafc", "row_index": 56, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003ed61e-7403-4930-9987-33e373094eafc", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e29a0a6-1110-4b64-b5b9-d77cacefa98a", "record_id": "flaws_cloudtrail:0000057:4e29a0a6-1110-4b64-b5b9-d77cacefa98a", "row_index": 57, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e29a0a6-1110-4b64-b5b9-d77cacefa98a", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f659ffc6-86a0-4ed6-ab5f-bb77fb10917b", "record_id": "flaws_cloudtrail:0000058:f659ffc6-86a0-4ed6-ab5f-bb77fb10917b", "row_index": 58, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f659ffc6-86a0-4ed6-ab5f-bb77fb10917b", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da7c960b-394f-45bd-988c-4c94e3af94b9", "record_id": "flaws_cloudtrail:0000059:da7c960b-394f-45bd-988c-4c94e3af94b9", "row_index": 59, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da7c960b-394f-45bd-988c-4c94e3af94b9", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d6553eb-9769-46dc-837d-bfef9eb5c212", "record_id": "flaws_cloudtrail:0000060:1d6553eb-9769-46dc-837d-bfef9eb5c212", "row_index": 60, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d6553eb-9769-46dc-837d-bfef9eb5c212", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81299f38-695d-45fb-997e-bfa3e48e4f37", "record_id": "flaws_cloudtrail:0000061:81299f38-695d-45fb-997e-bfa3e48e4f37", "row_index": 61, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81299f38-695d-45fb-997e-bfa3e48e4f37", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b773bd38-f514-4e3b-a3e7-0ad72b9daa98", "record_id": "flaws_cloudtrail:0000062:b773bd38-f514-4e3b-a3e7-0ad72b9daa98", "row_index": 62, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b773bd38-f514-4e3b-a3e7-0ad72b9daa98", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f547643-50d6-41ce-ba1d-69ab6a2aad25", "record_id": "flaws_cloudtrail:0000063:f547643-50d6-41ce-ba1d-69ab6a2aad25", "row_index": 63, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f547643-50d6-41ce-ba1d-69ab6a2aad25", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3bead07-f526-4876-9c1c-9961fac53966", "record_id": "flaws_cloudtrail:0000064:e3bead07-f526-4876-9c1c-9961fac53966", "row_index": 64, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3bead07-f526-4876-9c1c-9961fac53966", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3a9bbb8-b4e8-4735-b490-b968569c45c03", "record_id": "flaws_cloudtrail:0000065:e3a9bbb8-b4e8-4735-b490-b968569c45c03", "row_index": 65, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3a9bbb8-b4e8-4735-b490-b968569c45c03", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f1c1ba-607b-4c96-a1ee-aab9ccab70f2", "record_id": "flaws_cloudtrail:0000066:c2f1c1ba-607b-4c96-a1ee-aab9ccab70f2", "row_index": 66, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f1c1ba-607b-4c96-a1ee-aab9ccab70f2", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d617a89-67df-48a1-9197-b9e684127a0e", "record_id": "flaws_cloudtrail:0000067:8d617a89-67df-48a1-9197-b9e684127a0e", "row_index": 67, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d617a89-67df-48a1-9197-b9e684127a0e", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fab169ee-54fc-4fc7-85ef-9afe2dd97a9c", "record_id": "flaws_cloudtrail:0000068:fab169ee-54fc-4fc7-85ef-9afe2dd97a9c", "row_index": 68, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fab169ee-54fc-4fc7-85ef-9afe2dd97a9c", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "156d78f6-fa44-4096-bc83-de8bb022627a", "record_id": "flaws_cloudtrail:0000069:156d78f6-fa44-4096-bc83-de8bb022627a", "row_index": 69, "timestamp": "2018-12-08T14:37:53Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "156d78f6-fa44-4096-bc83-de8bb022627a", "eventTime": "2018-12-08T14:37:53Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f8ef28-f5fe-4f03-b918-794dc332f0fb", "record_id": "flaws_cloudtrail:0000070:69f8ef28-f5fe-4f03-b918-794dc332f0fb", "row_index": 70, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f8ef28-f5fe-4f03-b918-794dc332f0fb", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "814204b3-e6e6-42f0-bbab-bb21dbcbe33f", "record_id": "flaws_cloudtrail:0000071:814204b3-e6e6-42f0-bbab-bb21dbcbe33f", "row_index": 71, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "814204b3-e6e6-42f0-bbab-bb21dbcbe33f", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "066b688d-9220-4602-93ae-97b0ca46c495", "record_id": "flaws_cloudtrail:0000072:066b688d-9220-4602-93ae-97b0ca46c495", "row_index": 72, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "066b688d-9220-4602-93ae-97b0ca46c495", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f708588ee-6f52-4f93-a838-eb9ce266ed5f", "record_id": "flaws_cloudtrail:0000073:f708588ee-6f52-4f93-a838-eb9ce266ed5f", "row_index": 73, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f708588ee-6f52-4f93-a838-eb9ce266ed5f", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c33db17a-009a-4779-937f-66d12d6f9a20", "record_id": "flaws_cloudtrail:0000074:c33db17a-009a-4779-937f-66d12d6f9a20", "row_index": 74, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c33db17a-009a-4779-937f-66d12d6f9a20", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f5829e-6c8b-412e-90a9-e2f3ef2126d5", "record_id": "flaws_cloudtrail:0000075:b3f5829e-6c8b-412e-90a9-e2f3ef2126d5", "row_index": 75, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f5829e-6c8b-412e-90a9-e2f3ef2126d5", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f702072-92e1-4d42-9ec2-b807937f694f6", "record_id": "flaws_cloudtrail:0000076:3f702072-92e1-4d42-9ec2-b807937f694f6", "row_index": 76, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f702072-92e1-4d42-9ec2-b807937f694f6", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb636758-9e0f-4bbf-8e42-819166ede824", "record_id": "flaws_cloudtrail:0000077:fb636758-9e0f-4bbf-8e42-819166ede824", "row_index": 77, "timestamp": "2018-12-08T14:37:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 641, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb636758-9e0f-4bbf-8e42-819166ede824", "eventTime": "2018-12-08T14:37:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "307c9ad4-c2a8-4f31-a6d4-125cee749f44", "record_id": "flaws_cloudtrail:0000078:307c9ad4-c2a8-4f31-a6d4-125cee749f44", "row_index": 78, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "307c9ad4-c2a8-4f31-a6d4-125cee749f44", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a129887c8-96f3-4d0e-a754-36e6e240ae43", "record_id": "flaws_cloudtrail:0000079:a129887c8-96f3-4d0e-a754-36e6e240ae43", "row_index": 79, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a129887c8-96f3-4d0e-a754-36e6e240ae43", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a3108e2-0574-4205-b850-667ebf21e2af", "record_id": "flaws_cloudtrail:0000080:3a3108e2-0574-4205-b850-667ebf21e2af", "row_index": 80, "timestamp": "2018-12-08T14:37:56Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a3108e2-0574-4205-b850-667ebf21e2af", "eventTime": "2018-12-08T14:37:56Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "796cc581-f901-4131-908e-1e1205413c22", "record_id": "flaws_cloudtrail:0000081:796cc581-f901-4131-908e-1e1205413c22", "row_index": 81, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "796cc581-f901-4131-908e-1e1205413c22", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "789746b9b-d4af-4334-9db4-7106b8adf281", "record_id": "flaws_cloudtrail:0000082:789746b9b-d4af-4334-9db4-7106b8adf281", "row_index": 82, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "789746b9b-d4af-4334-9db4-7106b8adf281", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0990ca03-1bcd-43ab-a497-407951a8a28", "record_id": "flaws_cloudtrail:0000083:0990ca03-1bcd-43ab-a497-407951a8a28", "row_index": 83, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0990ca03-1bcd-43ab-a497-407951a8a28", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "548d1c86-fedf-42cc-b717-4320f8ef839b", "record_id": "flaws_cloudtrail:0000084:548d1c86-fedf-42cc-b717-4320f8ef839b", "row_index": 84, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "548d1c86-fedf-42cc-b717-4320f8ef839b", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d461cd-37af-46a3-b367-ddbab3c504225", "record_id": "flaws_cloudtrail:0000085:16d461cd-37af-46a3-b367-ddbab3c504225", "row_index": 85, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d461cd-37af-46a3-b367-ddbab3c504225", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60ad87a-d668-4b79-97fd-f7be9dac85e6", "record_id": "flaws_cloudtrail:0000086:d60ad87a-d668-4b79-97fd-f7be9dac85e6", "row_index": 86, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60ad87a-d668-4b79-97fd-f7be9dac85e6", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3afa6f5e-5eca-4d62-b733-6cd848b7b414", "record_id": "flaws_cloudtrail:0000087:3afa6f5e-5eca-4d62-b733-6cd848b7b414", "row_index": 87, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3afa6f5e-5eca-4d62-b733-6cd848b7b414", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "539ddb95-0ccc-432b-b1aa-16dcd7c7dd49", "record_id": "flaws_cloudtrail:0000088:539ddb95-0ccc-432b-b1aa-16dcd7c7dd49", "row_index": 88, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "539ddb95-0ccc-432b-b1aa-16dcd7c7dd49", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41a8db78-66ea-4eef-aef2-cf82691f2212", "record_id": "flaws_cloudtrail:0000089:41a8db78-66ea-4eef-aef2-cf82691f2212", "row_index": 89, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41a8db78-66ea-4eef-aef2-cf82691f2212", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c11805a-08e6-46db-8d4b-62b51c0de383", "record_id": "flaws_cloudtrail:0000090:4c11805a-08e6-46db-8d4b-62b51c0de383", "row_index": 90, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c11805a-08e6-46db-8d4b-62b51c0de383", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a05a324d-9515-4c15-a0c8-a8b175131d912", "record_id": "flaws_cloudtrail:0000091:a05a324d-9515-4c15-a0c8-a8b175131d912", "row_index": 91, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a05a324d-9515-4c15-a0c8-a8b175131d912", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8354bf-b647-403f-b551-3d30eabed726", "record_id": "flaws_cloudtrail:0000092:eb8354bf-b647-403f-b551-3d30eabed726", "row_index": 92, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8354bf-b647-403f-b551-3d30eabed726", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71a8b6eb-3316-4906-af84-4cee1754fd2e", "record_id": "flaws_cloudtrail:0000093:71a8b6eb-3316-4906-af84-4cee1754fd2e", "row_index": 93, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71a8b6eb-3316-4906-af84-4cee1754fd2e", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66916-6a66-49ec-bd86-aedff5e12ef2", "record_id": "flaws_cloudtrail:0000094:66916-6a66-49ec-bd86-aedff5e12ef2", "row_index": 94, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66916-6a66-49ec-bd86-aedff5e12ef2", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "131629fb3-7d1c-4e5c-bd23-f7677f9e698b", "record_id": "flaws_cloudtrail:0000095:131629fb3-7d1c-4e5c-bd23-f7677f9e698b", "row_index": 95, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "131629fb3-7d1c-4e5c-bd23-f7677f9e698b", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "315598a3c-79c0-46ac-a5bc-63d7a47a23d0", "record_id": "flaws_cloudtrail:0000096:315598a3c-79c0-46ac-a5bc-63d7a47a23d0", "row_index": 96, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "315598a3c-79c0-46ac-a5bc-63d7a47a23d0", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4650cf2-b5e0-40c1-beed-5f1c4cada8d7", "record_id": "flaws_cloudtrail:0000097:d4650cf2-b5e0-40c1-beed-5f1c4cada8d7", "row_index": 97, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4650cf2-b5e0-40c1-beed-5f1c4cada8d7", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4148cd3e-13dd-4d39-9445-39fffa8f2b93", "record_id": "flaws_cloudtrail:0000098:4148cd3e-13dd-4d39-9445-39fffa8f2b93", "row_index": 98, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4148cd3e-13dd-4d39-9445-39fffa8f2b93", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2daa34c8-ac2f-4d16-979b-c7ebe0c54ce1", "record_id": "flaws_cloudtrail:0000099:2daa34c8-ac2f-4d16-979b-c7ebe0c54ce1", "row_index": 99, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2daa34c8-ac2f-4d16-979b-c7ebe0c54ce1", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54cf656f-4b3b-450c-8016-c6abf988d840", "record_id": "flaws_cloudtrail:0000100:54cf656f-4b3b-450c-8016-c6abf988d840", "row_index": 100, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54cf656f-4b3b-450c-8016-c6abf988d840", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6485d83-bd98-417b-a2de-f9092e53f0ac", "record_id": "flaws_cloudtrail:0000101:f6485d83-bd98-417b-a2de-f9092e53f0ac", "row_index": 101, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6485d83-bd98-417b-a2de-f9092e53f0ac", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6da232e-c39f-4285-8ba1-ae7c715bd1cb", "record_id": "flaws_cloudtrail:0000102:b6da232e-c39f-4285-8ba1-ae7c715bd1cb", "row_index": 102, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6da232e-c39f-4285-8ba1-ae7c715bd1cb", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad71ce77-39e3-4cc5-b2e8-4c653a0dc84a", "record_id": "flaws_cloudtrail:0000103:ad71ce77-39e3-4cc5-b2e8-4c653a0dc84a", "row_index": 103, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad71ce77-39e3-4cc5-b2e8-4c653a0dc84a", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eef3b48-9a76-42e5-aaaa-92e846956f8a", "record_id": "flaws_cloudtrail:0000104:6eef3b48-9a76-42e5-aaaa-92e846956f8a", "row_index": 104, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eef3b48-9a76-42e5-aaaa-92e846956f8a", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c890f02-50de-4e25-96d4-6dd2b2b9767f", "record_id": "flaws_cloudtrail:0000105:9c890f02-50de-4e25-96d4-6dd2b2b9767f", "row_index": 105, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c890f02-50de-4e25-96d4-6dd2b2b9767f", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d292eec2-04bc-4d61-bf20-d3ac38ab279d", "record_id": "flaws_cloudtrail:0000106:d292eec2-04bc-4d61-bf20-d3ac38ab279d", "row_index": 106, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d292eec2-04bc-4d61-bf20-d3ac38ab279d", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38f6dbe2-61b4-4b3e-9a2c-670121b55399", "record_id": "flaws_cloudtrail:0000107:38f6dbe2-61b4-4b3e-9a2c-670121b55399", "row_index": 107, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38f6dbe2-61b4-4b3e-9a2c-670121b55399", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "856f7d95-9ca2-4dec-ba0e-f1e0fe61f13b", "record_id": "flaws_cloudtrail:0000108:856f7d95-9ca2-4dec-ba0e-f1e0fe61f13b", "row_index": 108, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "856f7d95-9ca2-4dec-ba0e-f1e0fe61f13b", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f799b14-4d51-43aa-a69b-458ec0fc3443", "record_id": "flaws_cloudtrail:0000109:5f799b14-4d51-43aa-a69b-458ec0fc3443", "row_index": 109, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f799b14-4d51-43aa-a69b-458ec0fc3443", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32011-626a-496b-87e7-3a7d22bae778", "record_id": "flaws_cloudtrail:0000110:b32011-626a-496b-87e7-3a7d22bae778", "row_index": 110, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32011-626a-496b-87e7-3a7d22bae778", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4d9f093-5bdb-4d22-af50-5af76a3d99f2", "record_id": "flaws_cloudtrail:0000111:a4d9f093-5bdb-4d22-af50-5af76a3d99f2", "row_index": 111, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4d9f093-5bdb-4d22-af50-5af76a3d99f2", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9de5736b-681e-435d-8e2f-e983f84a45e5", "record_id": "flaws_cloudtrail:0000112:9de5736b-681e-435d-8e2f-e983f84a45e5", "row_index": 112, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9de5736b-681e-435d-8e2f-e983f84a45e5", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca93ade4-50a4-467f-82a6-4cf1b6adead5", "record_id": "flaws_cloudtrail:0000113:ca93ade4-50a4-467f-82a6-4cf1b6adead5", "row_index": 113, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca93ade4-50a4-467f-82a6-4cf1b6adead5", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b244cf0a-0cac-4be2-a217-183479a0d8d4d", "record_id": "flaws_cloudtrail:0000114:b244cf0a-0cac-4be2-a217-183479a0d8d4d", "row_index": 114, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b244cf0a-0cac-4be2-a217-183479a0d8d4d", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3e222b-4acb-4580-afc6-c58359e7eced", "record_id": "flaws_cloudtrail:0000115:ac3e222b-4acb-4580-afc6-c58359e7eced", "row_index": 115, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3e222b-4acb-4580-afc6-c58359e7eced", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b754bba-d74e-4b5b-b64c-cf46688fac4d", "record_id": "flaws_cloudtrail:0000116:4b754bba-d74e-4b5b-b64c-cf46688fac4d", "row_index": 116, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b754bba-d74e-4b5b-b64c-cf46688fac4d", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1754c037-9ea8-4315-aa1d-e8f20621d4ec", "record_id": "flaws_cloudtrail:0000117:1754c037-9ea8-4315-aa1d-e8f20621d4ec", "row_index": 117, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1754c037-9ea8-4315-aa1d-e8f20621d4ec", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d11fcf8-41a2-437b-8b65-4fb46792e35", "record_id": "flaws_cloudtrail:0000118:9d11fcf8-41a2-437b-8b65-4fb46792e35", "row_index": 118, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d11fcf8-41a2-437b-8b65-4fb46792e35", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40f2fe19-798a-42d2-81e9-90c58264d509", "record_id": "flaws_cloudtrail:0000119:40f2fe19-798a-42d2-81e9-90c58264d509", "row_index": 119, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40f2fe19-798a-42d2-81e9-90c58264d509", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5973b77-6b36-4be7-aa66-638401668467", "record_id": "flaws_cloudtrail:0000120:d5973b77-6b36-4be7-aa66-638401668467", "row_index": 120, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5973b77-6b36-4be7-aa66-638401668467", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81e8edcc-f3ce-48f8-af4c-9d5067a7768b", "record_id": "flaws_cloudtrail:0000121:81e8edcc-f3ce-48f8-af4c-9d5067a7768b", "row_index": 121, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81e8edcc-f3ce-48f8-af4c-9d5067a7768b", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f3e5ec7-1e88-4546-adbf-b0f87534f505", "record_id": "flaws_cloudtrail:0000122:4f3e5ec7-1e88-4546-adbf-b0f87534f505", "row_index": 122, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f3e5ec7-1e88-4546-adbf-b0f87534f505", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee1fa20-7533-49bf-a4cd-059b3359da5b", "record_id": "flaws_cloudtrail:0000123:0ee1fa20-7533-49bf-a4cd-059b3359da5b", "row_index": 123, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee1fa20-7533-49bf-a4cd-059b3359da5b", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32c4c463-f8ef-478a-883f-951970e28136", "record_id": "flaws_cloudtrail:0000124:32c4c463-f8ef-478a-883f-951970e28136", "row_index": 124, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32c4c463-f8ef-478a-883f-951970e28136", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfe9371a-0c7b-439e-b501-f26654", "record_id": "flaws_cloudtrail:0000125:bfe9371a-0c7b-439e-b501-f26654", "row_index": 125, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfe9371a-0c7b-439e-b501-f26654", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6849e925-6e2f-4618-9d0d-7ed8ed92b9d8", "record_id": "flaws_cloudtrail:0000126:6849e925-6e2f-4618-9d0d-7ed8ed92b9d8", "row_index": 126, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6849e925-6e2f-4618-9d0d-7ed8ed92b9d8", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acb537ae-3671-47b8-88b3-6ed0d38b24aa", "record_id": "flaws_cloudtrail:0000127:acb537ae-3671-47b8-88b3-6ed0d38b24aa", "row_index": 127, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acb537ae-3671-47b8-88b3-6ed0d38b24aa", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e144b75e-27fe-47ca-a31e-d8148f71835b", "record_id": "flaws_cloudtrail:0000128:e144b75e-27fe-47ca-a31e-d8148f71835b", "row_index": 128, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e144b75e-27fe-47ca-a31e-d8148f71835b", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c17207-a337-4270-97b9-e765e2493df9", "record_id": "flaws_cloudtrail:0000129:8c17207-a337-4270-97b9-e765e2493df9", "row_index": 129, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c17207-a337-4270-97b9-e765e2493df9", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77dab306-274b-4bd6-928b-9ee8d52d6ae1", "record_id": "flaws_cloudtrail:0000130:77dab306-274b-4bd6-928b-9ee8d52d6ae1", "row_index": 130, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77dab306-274b-4bd6-928b-9ee8d52d6ae1", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2b94c1b-1a19-4c20-80b9-9497e5e2ad14", "record_id": "flaws_cloudtrail:0000131:e2b94c1b-1a19-4c20-80b9-9497e5e2ad14", "row_index": 131, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2b94c1b-1a19-4c20-80b9-9497e5e2ad14", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b822ecdd-c8de-4472-b038-f8adb4b53471", "record_id": "flaws_cloudtrail:0000132:b822ecdd-c8de-4472-b038-f8adb4b53471", "row_index": 132, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b822ecdd-c8de-4472-b038-f8adb4b53471", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe80c36d-bc0f-4526-bb2d-86632ccb3a4c", "record_id": "flaws_cloudtrail:0000133:fe80c36d-bc0f-4526-bb2d-86632ccb3a4c", "row_index": 133, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe80c36d-bc0f-4526-bb2d-86632ccb3a4c", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "908624d-d2b8-4b79-9dbf-ef06b4e92ab4", "record_id": "flaws_cloudtrail:0000134:908624d-d2b8-4b79-9dbf-ef06b4e92ab4", "row_index": 134, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "908624d-d2b8-4b79-9dbf-ef06b4e92ab4", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1683a31-c645-42bd-8d16-6a1b4062bcd1", "record_id": "flaws_cloudtrail:0000135:c1683a31-c645-42bd-8d16-6a1b4062bcd1", "row_index": 135, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1683a31-c645-42bd-8d16-6a1b4062bcd1", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23d97d2b-3863-458d-a017-dd546683f2b8", "record_id": "flaws_cloudtrail:0000136:23d97d2b-3863-458d-a017-dd546683f2b8", "row_index": 136, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23d97d2b-3863-458d-a017-dd546683f2b8", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866606b4-a658-4c08-a75e-07fde34e3111", "record_id": "flaws_cloudtrail:0000137:866606b4-a658-4c08-a75e-07fde34e3111", "row_index": 137, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866606b4-a658-4c08-a75e-07fde34e3111", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d90cba15-624d-4455-917a-5568b0ad9398", "record_id": "flaws_cloudtrail:0000138:d90cba15-624d-4455-917a-5568b0ad9398", "row_index": 138, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d90cba15-624d-4455-917a-5568b0ad9398", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e73509f-94bd-4998-9892-208586fa910", "record_id": "flaws_cloudtrail:0000139:e73509f-94bd-4998-9892-208586fa910", "row_index": 139, "timestamp": "2018-12-08T14:37:57Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e73509f-94bd-4998-9892-208586fa910", "eventTime": "2018-12-08T14:37:57Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a0169e-d813-42b1-b237-330679ef", "record_id": "flaws_cloudtrail:0000140:57a0169e-d813-42b1-b237-330679ef", "row_index": 140, "timestamp": "2018-12-08T14:37:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a0169e-d813-42b1-b237-330679ef", "eventTime": "2018-12-08T14:37:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b845838-125e-4049-8e21-11264b962c4d", "record_id": "flaws_cloudtrail:0000141:09b845838-125e-4049-8e21-11264b962c4d", "row_index": 141, "timestamp": "2018-12-08T14:37:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b845838-125e-4049-8e21-11264b962c4d", "eventTime": "2018-12-08T14:37:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68a29a01-ccaf-40dc-8660-b7bb2e77b14e", "record_id": "flaws_cloudtrail:0000142:68a29a01-ccaf-40dc-8660-b7bb2e77b14e", "row_index": 142, "timestamp": "2018-12-08T14:37:59Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68a29a01-ccaf-40dc-8660-b7bb2e77b14e", "eventTime": "2018-12-08T14:37:59Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31dad381-3882-4e2e-bfa3-05e8d176eaf8", "record_id": "flaws_cloudtrail:0000143:31dad381-3882-4e2e-bfa3-05e8d176eaf8", "row_index": 143, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31dad381-3882-4e2e-bfa3-05e8d176eaf8", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05f7ef36-5d57-4356-8f3a-faa61d36cd31", "record_id": "flaws_cloudtrail:0000144:05f7ef36-5d57-4356-8f3a-faa61d36cd31", "row_index": 144, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05f7ef36-5d57-4356-8f3a-faa61d36cd31", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "786728fe7-0e8e-4b16-b9ab-ce88225197b4", "record_id": "flaws_cloudtrail:0000145:786728fe7-0e8e-4b16-b9ab-ce88225197b4", "row_index": 145, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "786728fe7-0e8e-4b16-b9ab-ce88225197b4", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1aba75-0ec3-4171-bd99-a8d83e743143e", "record_id": "flaws_cloudtrail:0000146:7e1aba75-0ec3-4171-bd99-a8d83e743143e", "row_index": 146, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1aba75-0ec3-4171-bd99-a8d83e743143e", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bdef57d-0a91-478e-9fe8-1e3ab4bf4773", "record_id": "flaws_cloudtrail:0000147:5bdef57d-0a91-478e-9fe8-1e3ab4bf4773", "row_index": 147, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bdef57d-0a91-478e-9fe8-1e3ab4bf4773", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96e6f482-0692-4a22-ab2c-1645c2d99d31", "record_id": "flaws_cloudtrail:0000148:96e6f482-0692-4a22-ab2c-1645c2d99d31", "row_index": 148, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96e6f482-0692-4a22-ab2c-1645c2d99d31", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb159fff-a077-4a6a-8209-5d34f47bd294", "record_id": "flaws_cloudtrail:0000149:fb159fff-a077-4a6a-8209-5d34f47bd294", "row_index": 149, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb159fff-a077-4a6a-8209-5d34f47bd294", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7085ff75-92c6-4a1b-86a8-ce8f668689e", "record_id": "flaws_cloudtrail:0000150:7085ff75-92c6-4a1b-86a8-ce8f668689e", "row_index": 150, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7085ff75-92c6-4a1b-86a8-ce8f668689e", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07948c3e-4499-468b-b3b2-79449e46eb", "record_id": "flaws_cloudtrail:0000151:07948c3e-4499-468b-b3b2-79449e46eb", "row_index": 151, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07948c3e-4499-468b-b3b2-79449e46eb", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5037efc6-e5cb-48a5-94e6-cc69e79aa5be", "record_id": "flaws_cloudtrail:0000152:5037efc6-e5cb-48a5-94e6-cc69e79aa5be", "row_index": 152, "timestamp": "2018-12-08T14:38:01Z", "event_type": "GetStackPolicy", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5037efc6-e5cb-48a5-94e6-cc69e79aa5be", "eventTime": "2018-12-08T14:38:01Z", "eventName": "GetStackPolicy", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stackName": "Summit-Route-security-assessment-access"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861edd80-8ca9-49a8-a4f7-5c44168cd83", "record_id": "flaws_cloudtrail:0000153:861edd80-8ca9-49a8-a4f7-5c44168cd83", "row_index": 153, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861edd80-8ca9-49a8-a4f7-5c44168cd83", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edc60bb-4fb7-435a-b88a-38f89783a778", "record_id": "flaws_cloudtrail:0000154:4edc60bb-4fb7-435a-b88a-38f89783a778", "row_index": 154, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edc60bb-4fb7-435a-b88a-38f89783a778", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f737ec2-dc26-4dac-8a42-2f525169", "record_id": "flaws_cloudtrail:0000155:9f737ec2-dc26-4dac-8a42-2f525169", "row_index": 155, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f737ec2-dc26-4dac-8a42-2f525169", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "901b73c3-8a97-469c-b1a6-13c2fd40430", "record_id": "flaws_cloudtrail:0000156:901b73c3-8a97-469c-b1a6-13c2fd40430", "row_index": 156, "timestamp": "2018-12-08T14:38:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "901b73c3-8a97-469c-b1a6-13c2fd40430", "eventTime": "2018-12-08T14:38:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f79254f-2b64-46d3-a83b-b41e173fa11b", "record_id": "flaws_cloudtrail:0000157:f79254f-2b64-46d3-a83b-b41e173fa11b", "row_index": 157, "timestamp": "2018-12-08T14:38:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f79254f-2b64-46d3-a83b-b41e173fa11b", "eventTime": "2018-12-08T14:38:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "417383b8-f7fa-421a-8f70-c46aea43beeb", "record_id": "flaws_cloudtrail:0000158:417383b8-f7fa-421a-8f70-c46aea43beeb", "row_index": 158, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "417383b8-f7fa-421a-8f70-c46aea43beeb", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cbb521b-1d0a-4809-9807-a89be123444", "record_id": "flaws_cloudtrail:0000159:8cbb521b-1d0a-4809-9807-a89be123444", "row_index": 159, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cbb521b-1d0a-4809-9807-a89be123444", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3899c9ba-1f6d-4d28-b654-9c036b887e77", "record_id": "flaws_cloudtrail:0000160:3899c9ba-1f6d-4d28-b654-9c036b887e77", "row_index": 160, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3899c9ba-1f6d-4d28-b654-9c036b887e77", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad2eecb4-9fdc-4754-8974-85c525ae2a78", "record_id": "flaws_cloudtrail:0000161:ad2eecb4-9fdc-4754-8974-85c525ae2a78", "row_index": 161, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad2eecb4-9fdc-4754-8974-85c525ae2a78", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d319d36e-1862-45cc-b247-e2f56301", "record_id": "flaws_cloudtrail:0000162:d319d36e-1862-45cc-b247-e2f56301", "row_index": 162, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d319d36e-1862-45cc-b247-e2f56301", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "012a252d-b3fa-41d4-a58f-b7a188fed665", "record_id": "flaws_cloudtrail:0000163:012a252d-b3fa-41d4-a58f-b7a188fed665", "row_index": 163, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "012a252d-b3fa-41d4-a58f-b7a188fed665", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a5841a5-fcb6-46d6-9d38-9add718573", "record_id": "flaws_cloudtrail:0000164:6a5841a5-fcb6-46d6-9d38-9add718573", "row_index": 164, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a5841a5-fcb6-46d6-9d38-9add718573", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "083af2ec-b486-404b-9b86-fb3ee5025cfb", "record_id": "flaws_cloudtrail:0000165:083af2ec-b486-404b-9b86-fb3ee5025cfb", "row_index": 165, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "083af2ec-b486-404b-9b86-fb3ee5025cfb", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87b2bc16-3830-45ee-8f88-8d0809d11122", "record_id": "flaws_cloudtrail:0000166:87b2bc16-3830-45ee-8f88-8d0809d11122", "row_index": 166, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87b2bc16-3830-45ee-8f88-8d0809d11122", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac2d554e-23c1-4f23-b6b9-e2d1448b2c31", "record_id": "flaws_cloudtrail:0000167:ac2d554e-23c1-4f23-b6b9-e2d1448b2c31", "row_index": 167, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac2d554e-23c1-4f23-b6b9-e2d1448b2c31", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fd02f5-dc02-430a-ae22-3ce51bd1ea38", "record_id": "flaws_cloudtrail:0000168:09fd02f5-dc02-430a-ae22-3ce51bd1ea38", "row_index": 168, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fd02f5-dc02-430a-ae22-3ce51bd1ea38", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e6af7c6-1960-47d2-9c10-426a30f717b6", "record_id": "flaws_cloudtrail:0000169:8e6af7c6-1960-47d2-9c10-426a30f717b6", "row_index": 169, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e6af7c6-1960-47d2-9c10-426a30f717b6", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ff5bb04-845f-4b92-b027-f11ee40222", "record_id": "flaws_cloudtrail:0000170:2ff5bb04-845f-4b92-b027-f11ee40222", "row_index": 170, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ff5bb04-845f-4b92-b027-f11ee40222", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13c0bb7-51fc-4121-b230-4bab99a783c2", "record_id": "flaws_cloudtrail:0000171:e13c0bb7-51fc-4121-b230-4bab99a783c2", "row_index": 171, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13c0bb7-51fc-4121-b230-4bab99a783c2", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "539e3321-f0b0-49eb-9223-77b43083d", "record_id": "flaws_cloudtrail:0000172:539e3321-f0b0-49eb-9223-77b43083d", "row_index": 172, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "539e3321-f0b0-49eb-9223-77b43083d", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "234d38df-ffe6-4f28-bf23-cee21d68b589", "record_id": "flaws_cloudtrail:0000173:234d38df-ffe6-4f28-bf23-cee21d68b589", "row_index": 173, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "234d38df-ffe6-4f28-bf23-cee21d68b589", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c05e539a-9408-4f67-a17b-06de6a9e6276", "record_id": "flaws_cloudtrail:0000174:c05e539a-9408-4f67-a17b-06de6a9e6276", "row_index": 174, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c05e539a-9408-4f67-a17b-06de6a9e6276", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d685966-13b3-4f78-86c7-83de269341efb", "record_id": "flaws_cloudtrail:0000175:4d685966-13b3-4f78-86c7-83de269341efb", "row_index": 175, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d685966-13b3-4f78-86c7-83de269341efb", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb723f7b-b58d-473e-a36b-2dcbb182e33a", "record_id": "flaws_cloudtrail:0000176:fb723f7b-b58d-473e-a36b-2dcbb182e33a", "row_index": 176, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb723f7b-b58d-473e-a36b-2dcbb182e33a", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c121e9-0ca1-4681-9410-ac42d1c33eaf", "record_id": "flaws_cloudtrail:0000177:77c121e9-0ca1-4681-9410-ac42d1c33eaf", "row_index": 177, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c121e9-0ca1-4681-9410-ac42d1c33eaf", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a180c6e-0e51-4442-8afe-f57dca1c7a34", "record_id": "flaws_cloudtrail:0000178:7a180c6e-0e51-4442-8afe-f57dca1c7a34", "row_index": 178, "timestamp": "2018-12-08T14:38:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a180c6e-0e51-4442-8afe-f57dca1c7a34", "eventTime": "2018-12-08T14:38:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c002aeb-885e-4c2e-afea-ee829c310f4b", "record_id": "flaws_cloudtrail:0000179:3c002aeb-885e-4c2e-afea-ee829c310f4b", "row_index": 179, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c002aeb-885e-4c2e-afea-ee829c310f4b", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e3ceeb-5974-4857-9f2f-0f534c478bc1", "record_id": "flaws_cloudtrail:0000180:31e3ceeb-5974-4857-9f2f-0f534c478bc1", "row_index": 180, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e3ceeb-5974-4857-9f2f-0f534c478bc1", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7bd404-0ec8-4809-a32e-13d160768d03", "record_id": "flaws_cloudtrail:0000181:9b7bd404-0ec8-4809-a32e-13d160768d03", "row_index": 181, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7bd404-0ec8-4809-a32e-13d160768d03", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a6efbf8-8b15-4bde-822a-40a559ded9a4", "record_id": "flaws_cloudtrail:0000182:2a6efbf8-8b15-4bde-822a-40a559ded9a4", "row_index": 182, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a6efbf8-8b15-4bde-822a-40a559ded9a4", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "192942bfa-e122-4647-af92-6ebdf4e598413", "record_id": "flaws_cloudtrail:0000183:192942bfa-e122-4647-af92-6ebdf4e598413", "row_index": 183, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "192942bfa-e122-4647-af92-6ebdf4e598413", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "525b50cd-87d8-4101-a84e-65617086135c", "record_id": "flaws_cloudtrail:0000184:525b50cd-87d8-4101-a84e-65617086135c", "row_index": 184, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "525b50cd-87d8-4101-a84e-65617086135c", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e125b3ab-c4b1-4dc4-b7a0-d8984a04f76a", "record_id": "flaws_cloudtrail:0000185:e125b3ab-c4b1-4dc4-b7a0-d8984a04f76a", "row_index": 185, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e125b3ab-c4b1-4dc4-b7a0-d8984a04f76a", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e3adec-90d8-4374-9517-e558fda3dd83", "record_id": "flaws_cloudtrail:0000186:f0e3adec-90d8-4374-9517-e558fda3dd83", "row_index": 186, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e3adec-90d8-4374-9517-e558fda3dd83", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2620abb-262a-4460-a288-752ebf99d9c0", "record_id": "flaws_cloudtrail:0000187:f2620abb-262a-4460-a288-752ebf99d9c0", "row_index": 187, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2620abb-262a-4460-a288-752ebf99d9c0", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d76c6b9-c66e-437d-954c-f5616be8d841", "record_id": "flaws_cloudtrail:0000188:3d76c6b9-c66e-437d-954c-f5616be8d841", "row_index": 188, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d76c6b9-c66e-437d-954c-f5616be8d841", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31b4e394-6300-482f-b5c0-3c7653aefcb0", "record_id": "flaws_cloudtrail:0000189:31b4e394-6300-482f-b5c0-3c7653aefcb0", "row_index": 189, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31b4e394-6300-482f-b5c0-3c7653aefcb0", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38f71db8-ea02-4e9c-9235-1f15d92823a9", "record_id": "flaws_cloudtrail:0000190:38f71db8-ea02-4e9c-9235-1f15d92823a9", "row_index": 190, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38f71db8-ea02-4e9c-9235-1f15d92823a9", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c66efb2-5508-4bd1-84ba-03efad0ee615", "record_id": "flaws_cloudtrail:0000191:2c66efb2-5508-4bd1-84ba-03efad0ee615", "row_index": 191, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c66efb2-5508-4bd1-84ba-03efad0ee615", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9805ee1b-faee-4499-9f1c-3f0ee0aa9087", "record_id": "flaws_cloudtrail:0000192:9805ee1b-faee-4499-9f1c-3f0ee0aa9087", "row_index": 192, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9805ee1b-faee-4499-9f1c-3f0ee0aa9087", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8039ed82-8665-492d-9fc5-dace422ada67", "record_id": "flaws_cloudtrail:0000193:8039ed82-8665-492d-9fc5-dace422ada67", "row_index": 193, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8039ed82-8665-492d-9fc5-dace422ada67", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27e8215b-2b87-4e25-b305-ad4f6a788ff7", "record_id": "flaws_cloudtrail:0000194:27e8215b-2b87-4e25-b305-ad4f6a788ff7", "row_index": 194, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27e8215b-2b87-4e25-b305-ad4f6a788ff7", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc38a55-9a98-4bc7-9084-7b0e41c37d79", "record_id": "flaws_cloudtrail:0000195:fdc38a55-9a98-4bc7-9084-7b0e41c37d79", "row_index": 195, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc38a55-9a98-4bc7-9084-7b0e41c37d79", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19cb5a44-0090-4968-8dec-bd207d1f4aa4", "record_id": "flaws_cloudtrail:0000196:19cb5a44-0090-4968-8dec-bd207d1f4aa4", "row_index": 196, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19cb5a44-0090-4968-8dec-bd207d1f4aa4", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce2c6d01-2f9a-4215-9248-660a3b0671ce", "record_id": "flaws_cloudtrail:0000197:ce2c6d01-2f9a-4215-9248-660a3b0671ce", "row_index": 197, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce2c6d01-2f9a-4215-9248-660a3b0671ce", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fce45ac3-7df3-4f0c-8778-12c98ce9c873", "record_id": "flaws_cloudtrail:0000198:fce45ac3-7df3-4f0c-8778-12c98ce9c873", "row_index": 198, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fce45ac3-7df3-4f0c-8778-12c98ce9c873", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e01545c-a078-4e7c-9818-2c92bcf572f4", "record_id": "flaws_cloudtrail:0000199:1e01545c-a078-4e7c-9818-2c92bcf572f4", "row_index": 199, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e01545c-a078-4e7c-9818-2c92bcf572f4", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea8e945-3f65-495e-9dcb-75c96092f8fe", "record_id": "flaws_cloudtrail:0000200:dea8e945-3f65-495e-9dcb-75c96092f8fe", "row_index": 200, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea8e945-3f65-495e-9dcb-75c96092f8fe", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756289bbc-9a47-44bd-88bf-46f9de8293e5", "record_id": "flaws_cloudtrail:0000201:756289bbc-9a47-44bd-88bf-46f9de8293e5", "row_index": 201, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756289bbc-9a47-44bd-88bf-46f9de8293e5", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "267a7395-60de-4a8e-a301-a15ce518819d", "record_id": "flaws_cloudtrail:0000202:267a7395-60de-4a8e-a301-a15ce518819d", "row_index": 202, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "267a7395-60de-4a8e-a301-a15ce518819d", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c754e484-1d92-4d6b-b6c8-c5a869849d5c9", "record_id": "flaws_cloudtrail:0000203:c754e484-1d92-4d6b-b6c8-c5a869849d5c9", "row_index": 203, "timestamp": "2018-12-08T14:38:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c754e484-1d92-4d6b-b6c8-c5a869849d5c9", "eventTime": "2018-12-08T14:38:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ade373-99a4-46db-8aa9-1d88aed53e5f", "record_id": "flaws_cloudtrail:0000204:49ade373-99a4-46db-8aa9-1d88aed53e5f", "row_index": 204, "timestamp": "2018-12-08T14:38:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ade373-99a4-46db-8aa9-1d88aed53e5f", "eventTime": "2018-12-08T14:38:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bad656012-12fe-4af5-95a1-d61dc0a39cc8", "record_id": "flaws_cloudtrail:0000205:bad656012-12fe-4af5-95a1-d61dc0a39cc8", "row_index": 205, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bad656012-12fe-4af5-95a1-d61dc0a39cc8", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19dd4780-61f6-4382-b4c6-c870cb94815b", "record_id": "flaws_cloudtrail:0000206:19dd4780-61f6-4382-b4c6-c870cb94815b", "row_index": 206, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19dd4780-61f6-4382-b4c6-c870cb94815b", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a73b6c73-4f2e-463b-8a11-52e22024", "record_id": "flaws_cloudtrail:0000207:a73b6c73-4f2e-463b-8a11-52e22024", "row_index": 207, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a73b6c73-4f2e-463b-8a11-52e22024", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17538f-0e17-4eed-af5d-08a2fc39df87", "record_id": "flaws_cloudtrail:0000208:17538f-0e17-4eed-af5d-08a2fc39df87", "row_index": 208, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17538f-0e17-4eed-af5d-08a2fc39df87", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b71a444a-6524-424d-b932-f65b7b38aa1a", "record_id": "flaws_cloudtrail:0000209:b71a444a-6524-424d-b932-f65b7b38aa1a", "row_index": 209, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b71a444a-6524-424d-b932-f65b7b38aa1a", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "281be501-d4ac-45bb-835d-12706ce44963", "record_id": "flaws_cloudtrail:0000210:281be501-d4ac-45bb-835d-12706ce44963", "row_index": 210, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "281be501-d4ac-45bb-835d-12706ce44963", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bce65f1-9663-4bcf-96ca-387d3d96a8fa", "record_id": "flaws_cloudtrail:0000211:0bce65f1-9663-4bcf-96ca-387d3d96a8fa", "row_index": 211, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bce65f1-9663-4bcf-96ca-387d3d96a8fa", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97bb1d75-400e-4a9a-9665-205b1a16b4b7", "record_id": "flaws_cloudtrail:0000212:97bb1d75-400e-4a9a-9665-205b1a16b4b7", "row_index": 212, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97bb1d75-400e-4a9a-9665-205b1a16b4b7", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c545bd5-e54d-4be0-a20f-7827952ec8ed", "record_id": "flaws_cloudtrail:0000213:8c545bd5-e54d-4be0-a20f-7827952ec8ed", "row_index": 213, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c545bd5-e54d-4be0-a20f-7827952ec8ed", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f8cf40-74cd-41f2-8ee7-7a2e39706ba6", "record_id": "flaws_cloudtrail:0000214:69f8cf40-74cd-41f2-8ee7-7a2e39706ba6", "row_index": 214, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f8cf40-74cd-41f2-8ee7-7a2e39706ba6", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e576085ba-365b-468d-8106-ac07d506adc3", "record_id": "flaws_cloudtrail:0000215:e576085ba-365b-468d-8106-ac07d506adc3", "row_index": 215, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e576085ba-365b-468d-8106-ac07d506adc3", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82924c-e054-4963-9f81-f724a13674", "record_id": "flaws_cloudtrail:0000216:82924c-e054-4963-9f81-f724a13674", "row_index": 216, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82924c-e054-4963-9f81-f724a13674", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d51e10-b1fa-42bd-ad39-9f2c06a6dcb7", "record_id": "flaws_cloudtrail:0000217:30d51e10-b1fa-42bd-ad39-9f2c06a6dcb7", "row_index": 217, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d51e10-b1fa-42bd-ad39-9f2c06a6dcb7", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2f9e93b-503a-47ab-9f0e-8e05ff4f15ad", "record_id": "flaws_cloudtrail:0000218:d2f9e93b-503a-47ab-9f0e-8e05ff4f15ad", "row_index": 218, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2f9e93b-503a-47ab-9f0e-8e05ff4f15ad", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b07941d4-2086-41d0-924a-72348c651cbc", "record_id": "flaws_cloudtrail:0000219:b07941d4-2086-41d0-924a-72348c651cbc", "row_index": 219, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b07941d4-2086-41d0-924a-72348c651cbc", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "085eda3e-b325-458d-a0ee-ebca13253255", "record_id": "flaws_cloudtrail:0000220:085eda3e-b325-458d-a0ee-ebca13253255", "row_index": 220, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "085eda3e-b325-458d-a0ee-ebca13253255", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa30fa4-232c-4d5d-8495-60867c2c2f", "record_id": "flaws_cloudtrail:0000221:7aa30fa4-232c-4d5d-8495-60867c2c2f", "row_index": 221, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa30fa4-232c-4d5d-8495-60867c2c2f", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a92016e4-bce8-445f-acf4-78f319263e33", "record_id": "flaws_cloudtrail:0000222:a92016e4-bce8-445f-acf4-78f319263e33", "row_index": 222, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a92016e4-bce8-445f-acf4-78f319263e33", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d415d6a9-bd1a-4bc4-a8c8-2f464e992f03", "record_id": "flaws_cloudtrail:0000223:d415d6a9-bd1a-4bc4-a8c8-2f464e992f03", "row_index": 223, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d415d6a9-bd1a-4bc4-a8c8-2f464e992f03", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9268b413-d8b1-4016-9523-5ac92dc2c783", "record_id": "flaws_cloudtrail:0000224:9268b413-d8b1-4016-9523-5ac92dc2c783", "row_index": 224, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9268b413-d8b1-4016-9523-5ac92dc2c783", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d829ab25-e0a7-4398-95da-dcb9b44b762a", "record_id": "flaws_cloudtrail:0000225:d829ab25-e0a7-4398-95da-dcb9b44b762a", "row_index": 225, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d829ab25-e0a7-4398-95da-dcb9b44b762a", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1fc92f4-465d-43dc-9b53-2f16a314c800", "record_id": "flaws_cloudtrail:0000226:d1fc92f4-465d-43dc-9b53-2f16a314c800", "row_index": 226, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1fc92f4-465d-43dc-9b53-2f16a314c800", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "711ce075-8a4f-42f5-92c8-205f022c9cbd", "record_id": "flaws_cloudtrail:0000227:711ce075-8a4f-42f5-92c8-205f022c9cbd", "row_index": 227, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "711ce075-8a4f-42f5-92c8-205f022c9cbd", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d5b4f98-5590-4a64-b438-b7c9bba65748", "record_id": "flaws_cloudtrail:0000228:8d5b4f98-5590-4a64-b438-b7c9bba65748", "row_index": 228, "timestamp": "2018-12-08T14:38:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d5b4f98-5590-4a64-b438-b7c9bba65748", "eventTime": "2018-12-08T14:38:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02d0f6c1-d067-4728-9608-0cd01f3e19f5", "record_id": "flaws_cloudtrail:0000229:02d0f6c1-d067-4728-9608-0cd01f3e19f5", "row_index": 229, "timestamp": "2018-12-08T14:38:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02d0f6c1-d067-4728-9608-0cd01f3e19f5", "eventTime": "2018-12-08T14:38:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58fc0eb2-f8ab-4126-ac34-59a1706c918c", "record_id": "flaws_cloudtrail:0000230:58fc0eb2-f8ab-4126-ac34-59a1706c918c", "row_index": 230, "timestamp": "2018-12-08T14:38:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58fc0eb2-f8ab-4126-ac34-59a1706c918c", "eventTime": "2018-12-08T14:38:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8efc0897-c136-42a8-963c-0213b7524633", "record_id": "flaws_cloudtrail:0000231:8efc0897-c136-42a8-963c-0213b7524633", "row_index": 231, "timestamp": "2018-12-08T14:38:13Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8efc0897-c136-42a8-963c-0213b7524633", "eventTime": "2018-12-08T14:38:13Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e8cb73e-07ff-442a-b745-9de58cd290341", "record_id": "flaws_cloudtrail:0000232:2e8cb73e-07ff-442a-b745-9de58cd290341", "row_index": 232, "timestamp": "2018-12-08T14:38:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e8cb73e-07ff-442a-b745-9de58cd290341", "eventTime": "2018-12-08T14:38:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709ac47c-e4e5-468d-bab5-bdbe5fbedf2b", "record_id": "flaws_cloudtrail:0000233:709ac47c-e4e5-468d-bab5-bdbe5fbedf2b", "row_index": 233, "timestamp": "2018-12-08T14:38:13Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709ac47c-e4e5-468d-bab5-bdbe5fbedf2b", "eventTime": "2018-12-08T14:38:13Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b17b9925-f124-491c-bb7e-32a300d36073", "record_id": "flaws_cloudtrail:0000234:b17b9925-f124-491c-bb7e-32a300d36073", "row_index": 234, "timestamp": "2018-12-08T14:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b17b9925-f124-491c-bb7e-32a300d36073", "eventTime": "2018-12-08T14:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd38bc9e-e1eb-416f-bafa-f581b20b942e", "record_id": "flaws_cloudtrail:0000235:dd38bc9e-e1eb-416f-bafa-f581b20b942e", "row_index": 235, "timestamp": "2018-12-08T14:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd38bc9e-e1eb-416f-bafa-f581b20b942e", "eventTime": "2018-12-08T14:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de6c5de8-5d30-428f-8cf8-82b501334f9a", "record_id": "flaws_cloudtrail:0000236:de6c5de8-5d30-428f-8cf8-82b501334f9a", "row_index": 236, "timestamp": "2018-12-08T14:38:15Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de6c5de8-5d30-428f-8cf8-82b501334f9a", "eventTime": "2018-12-08T14:38:15Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1bf0189-1835-4c99-a0a5-07b56ed6aea4", "record_id": "flaws_cloudtrail:0000237:d1bf0189-1835-4c99-a0a5-07b56ed6aea4", "row_index": 237, "timestamp": "2018-12-08T14:38:15Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1bf0189-1835-4c99-a0a5-07b56ed6aea4", "eventTime": "2018-12-08T14:38:15Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a472214-504b-4a0b-9a0d-9750da06a8a1", "record_id": "flaws_cloudtrail:0000238:9a472214-504b-4a0b-9a0d-9750da06a8a1", "row_index": 238, "timestamp": "2018-12-08T14:38:15Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a472214-504b-4a0b-9a0d-9750da06a8a1", "eventTime": "2018-12-08T14:38:15Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a394d222-8703-4e2a-87e3-1d19e8aae72c", "record_id": "flaws_cloudtrail:0000239:a394d222-8703-4e2a-87e3-1d19e8aae72c", "row_index": 239, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a394d222-8703-4e2a-87e3-1d19e8aae72c", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7087e1e3-2d64-4226-85e1-a399a9c830f4", "record_id": "flaws_cloudtrail:0000240:7087e1e3-2d64-4226-85e1-a399a9c830f4", "row_index": 240, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7087e1e3-2d64-4226-85e1-a399a9c830f4", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cadda370-578c-44b3-987f-0c7dc0635959", "record_id": "flaws_cloudtrail:0000241:cadda370-578c-44b3-987f-0c7dc0635959", "row_index": 241, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cadda370-578c-44b3-987f-0c7dc0635959", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7feefd-1c0b-441e-928b-6831389f51ef", "record_id": "flaws_cloudtrail:0000242:9c7feefd-1c0b-441e-928b-6831389f51ef", "row_index": 242, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7feefd-1c0b-441e-928b-6831389f51ef", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ae9ea4e-c25a-4e26-8b6d-3851e2dd20d4", "record_id": "flaws_cloudtrail:0000243:7ae9ea4e-c25a-4e26-8b6d-3851e2dd20d4", "row_index": 243, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ae9ea4e-c25a-4e26-8b6d-3851e2dd20d4", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9447d2-7180-443c-85b1-45fb04bbb21d", "record_id": "flaws_cloudtrail:0000244:2b9447d2-7180-443c-85b1-45fb04bbb21d", "row_index": 244, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9447d2-7180-443c-85b1-45fb04bbb21d", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f01267-1cf9-4f4c-8459-7a51edbb7ea9", "record_id": "flaws_cloudtrail:0000245:4f01267-1cf9-4f4c-8459-7a51edbb7ea9", "row_index": 245, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f01267-1cf9-4f4c-8459-7a51edbb7ea9", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e84ef36f-b9c1-41d0-b2d1-eb2529b385bd", "record_id": "flaws_cloudtrail:0000246:e84ef36f-b9c1-41d0-b2d1-eb2529b385bd", "row_index": 246, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e84ef36f-b9c1-41d0-b2d1-eb2529b385bd", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb8992bd-c5da-42d0-888c-115f46469285", "record_id": "flaws_cloudtrail:0000247:eb8992bd-c5da-42d0-888c-115f46469285", "row_index": 247, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb8992bd-c5da-42d0-888c-115f46469285", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43b5492a-012a-433c-86bc-927dd359068f", "record_id": "flaws_cloudtrail:0000248:43b5492a-012a-433c-86bc-927dd359068f", "row_index": 248, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43b5492a-012a-433c-86bc-927dd359068f", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95528-7b6d-4fb3-b63d-6027a35557b3", "record_id": "flaws_cloudtrail:0000249:95528-7b6d-4fb3-b63d-6027a35557b3", "row_index": 249, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95528-7b6d-4fb3-b63d-6027a35557b3", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628e08a6-d5ce-4366-bf8a-d7efa64938ce", "record_id": "flaws_cloudtrail:0000250:628e08a6-d5ce-4366-bf8a-d7efa64938ce", "row_index": 250, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ12SZQPLKPA00920", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628e08a6-d5ce-4366-bf8a-d7efa64938ce", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ12SZQPLKPA00920", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ac7be8-3b03-4adb-8c11-afde5c512e63", "record_id": "flaws_cloudtrail:0000251:c8ac7be8-3b03-4adb-8c11-afde5c512e63", "row_index": 251, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ac7be8-3b03-4adb-8c11-afde5c512e63", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37f7c765-7383-45e7-ac66-7620d36eab0f", "record_id": "flaws_cloudtrail:0000252:37f7c765-7383-45e7-ac66-7620d36eab0f", "row_index": 252, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37f7c765-7383-45e7-ac66-7620d36eab0f", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf754d5c-cb7f-4b9f-a8e4-b1257bc5cf9e", "record_id": "flaws_cloudtrail:0000253:bf754d5c-cb7f-4b9f-a8e4-b1257bc5cf9e", "row_index": 253, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf754d5c-cb7f-4b9f-a8e4-b1257bc5cf9e", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3170d36e-f0b3-40f5-a9ea-03e9ed7cc68f", "record_id": "flaws_cloudtrail:0000254:3170d36e-f0b3-40f5-a9ea-03e9ed7cc68f", "row_index": 254, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3170d36e-f0b3-40f5-a9ea-03e9ed7cc68f", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a25f017-eed1-496a-b253-1d63830d", "record_id": "flaws_cloudtrail:0000255:3a25f017-eed1-496a-b253-1d63830d", "row_index": 255, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a25f017-eed1-496a-b253-1d63830d", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2584e5a-f96a-4728-b93d-0d288003434b", "record_id": "flaws_cloudtrail:0000256:b2584e5a-f96a-4728-b93d-0d288003434b", "row_index": 256, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2584e5a-f96a-4728-b93d-0d288003434b", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da516a82-4f5a-46d4-bc20-9eb0a860a5c8", "record_id": "flaws_cloudtrail:0000257:da516a82-4f5a-46d4-bc20-9eb0a860a5c8", "row_index": 257, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da516a82-4f5a-46d4-bc20-9eb0a860a5c8", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b229ce-5bcc-4352-95b2-609c297f8049", "record_id": "flaws_cloudtrail:0000258:16b229ce-5bcc-4352-95b2-609c297f8049", "row_index": 258, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b229ce-5bcc-4352-95b2-609c297f8049", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84e318ad-7f91-48d9-bea5-5151c621e4ec", "record_id": "flaws_cloudtrail:0000259:84e318ad-7f91-48d9-bea5-5151c621e4ec", "row_index": 259, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84e318ad-7f91-48d9-bea5-5151c621e4ec", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "185b775e-7a64-4433-a97f-39936d2008cc", "record_id": "flaws_cloudtrail:0000260:185b775e-7a64-4433-a97f-39936d2008cc", "row_index": 260, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "185b775e-7a64-4433-a97f-39936d2008cc", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740e7978-6515-4a73-bf36-2633dedca89b", "record_id": "flaws_cloudtrail:0000261:740e7978-6515-4a73-bf36-2633dedca89b", "row_index": 261, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740e7978-6515-4a73-bf36-2633dedca89b", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec35c2a5-b041-4bd5-bb85-6fe5944f3960", "record_id": "flaws_cloudtrail:0000262:ec35c2a5-b041-4bd5-bb85-6fe5944f3960", "row_index": 262, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec35c2a5-b041-4bd5-bb85-6fe5944f3960", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abfe1156-6764-4814-ae78-38967b859472", "record_id": "flaws_cloudtrail:0000263:abfe1156-6764-4814-ae78-38967b859472", "row_index": 263, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abfe1156-6764-4814-ae78-38967b859472", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc9cb221-e7f0-4b3b-b504-2330a4fca322", "record_id": "flaws_cloudtrail:0000264:dc9cb221-e7f0-4b3b-b504-2330a4fca322", "row_index": 264, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc9cb221-e7f0-4b3b-b504-2330a4fca322", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb00e3a-31a3-49e3-a3e3-47ca646f0f1d", "record_id": "flaws_cloudtrail:0000265:4cb00e3a-31a3-49e3-a3e3-47ca646f0f1d", "row_index": 265, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb00e3a-31a3-49e3-a3e3-47ca646f0f1d", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d00f56-8eca-4e6c-ad0c-13facdd4fee0", "record_id": "flaws_cloudtrail:0000266:68d00f56-8eca-4e6c-ad0c-13facdd4fee0", "row_index": 266, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d00f56-8eca-4e6c-ad0c-13facdd4fee0", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "438ff74b-df29-4aba-93ae-3205cf995cbc", "record_id": "flaws_cloudtrail:0000267:438ff74b-df29-4aba-93ae-3205cf995cbc", "row_index": 267, "timestamp": "2018-12-08T14:38:16Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "438ff74b-df29-4aba-93ae-3205cf995cbc", "eventTime": "2018-12-08T14:38:16Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4130d430-16ca-4902-97c5-4c6dc2fbd934", "record_id": "flaws_cloudtrail:0000268:4130d430-16ca-4902-97c5-4c6dc2fbd934", "row_index": 268, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4130d430-16ca-4902-97c5-4c6dc2fbd934", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f2d601-b5d1-4f15-8a76-413e1a8e5205", "record_id": "flaws_cloudtrail:0000269:28f2d601-b5d1-4f15-8a76-413e1a8e5205", "row_index": 269, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f2d601-b5d1-4f15-8a76-413e1a8e5205", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a304c836-3bf8-470c-acbc-f9d54407bc25", "record_id": "flaws_cloudtrail:0000270:a304c836-3bf8-470c-acbc-f9d54407bc25", "row_index": 270, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a304c836-3bf8-470c-acbc-f9d54407bc25", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eae1369-9ef2-454a-a51b-e774f429030b", "record_id": "flaws_cloudtrail:0000271:6eae1369-9ef2-454a-a51b-e774f429030b", "row_index": 271, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eae1369-9ef2-454a-a51b-e774f429030b", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4c899627-9269-4c7d-8256-1e919732fa59", "record_id": "flaws_cloudtrail:0000272:b4c899627-9269-4c7d-8256-1e919732fa59", "row_index": 272, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4c899627-9269-4c7d-8256-1e919732fa59", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2b6f8dc-7691-407a-b042-be52f57cd2ab", "record_id": "flaws_cloudtrail:0000273:e2b6f8dc-7691-407a-b042-be52f57cd2ab", "row_index": 273, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2b6f8dc-7691-407a-b042-be52f57cd2ab", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8e973ca-1c4b-4826-b268-ee18affca62e", "record_id": "flaws_cloudtrail:0000274:c8e973ca-1c4b-4826-b268-ee18affca62e", "row_index": 274, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8e973ca-1c4b-4826-b268-ee18affca62e", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "765cac22-8a6b-4894-be26-e91b69a60976", "record_id": "flaws_cloudtrail:0000275:765cac22-8a6b-4894-be26-e91b69a60976", "row_index": 275, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "765cac22-8a6b-4894-be26-e91b69a60976", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b807866ac-a504-4969-b3a2-44f2f1263cb0", "record_id": "flaws_cloudtrail:0000276:b807866ac-a504-4969-b3a2-44f2f1263cb0", "row_index": 276, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b807866ac-a504-4969-b3a2-44f2f1263cb0", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b88105-003c-44ac-b273-996659cf28c2", "record_id": "flaws_cloudtrail:0000277:f2b88105-003c-44ac-b273-996659cf28c2", "row_index": 277, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b88105-003c-44ac-b273-996659cf28c2", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aee04abd-26c3-4a62-a510-5d843171f3f8b", "record_id": "flaws_cloudtrail:0000278:aee04abd-26c3-4a62-a510-5d843171f3f8b", "row_index": 278, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aee04abd-26c3-4a62-a510-5d843171f3f8b", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e20a23-e8dd-4e10-b890-d058287a13f", "record_id": "flaws_cloudtrail:0000279:83e20a23-e8dd-4e10-b890-d058287a13f", "row_index": 279, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e20a23-e8dd-4e10-b890-d058287a13f", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f0fa8e6-46fb-4074-b99a-d896e071cff8", "record_id": "flaws_cloudtrail:0000280:8f0fa8e6-46fb-4074-b99a-d896e071cff8", "row_index": 280, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f0fa8e6-46fb-4074-b99a-d896e071cff8", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fff2cd-5c76-40cf-9e10-137127a1d721c", "record_id": "flaws_cloudtrail:0000281:90fff2cd-5c76-40cf-9e10-137127a1d721c", "row_index": 281, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fff2cd-5c76-40cf-9e10-137127a1d721c", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "567f7137-d2ef-4a79-9720-671e47634", "record_id": "flaws_cloudtrail:0000282:567f7137-d2ef-4a79-9720-671e47634", "row_index": 282, "timestamp": "2018-12-08T14:38:17Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "567f7137-d2ef-4a79-9720-671e47634", "eventTime": "2018-12-08T14:38:17Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "083422b-1fab-41c9-ac79-56d51c202fda", "record_id": "flaws_cloudtrail:0000283:083422b-1fab-41c9-ac79-56d51c202fda", "row_index": 283, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "083422b-1fab-41c9-ac79-56d51c202fda", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7aa09d9-ed58-4e43-b0de-080b4e07dd31", "record_id": "flaws_cloudtrail:0000284:b7aa09d9-ed58-4e43-b0de-080b4e07dd31", "row_index": 284, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7aa09d9-ed58-4e43-b0de-080b4e07dd31", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e43cd10-1e5d-4ffd-85ae-c162f1bd8877", "record_id": "flaws_cloudtrail:0000285:4e43cd10-1e5d-4ffd-85ae-c162f1bd8877", "row_index": 285, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e43cd10-1e5d-4ffd-85ae-c162f1bd8877", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c711c01-a201-4601-ba90-64721ab287", "record_id": "flaws_cloudtrail:0000286:9c711c01-a201-4601-ba90-64721ab287", "row_index": 286, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c711c01-a201-4601-ba90-64721ab287", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2629b6cf-4192-4c56-9f63-e72cace22a6d", "record_id": "flaws_cloudtrail:0000287:2629b6cf-4192-4c56-9f63-e72cace22a6d", "row_index": 287, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2629b6cf-4192-4c56-9f63-e72cace22a6d", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edc7f9f3-4b25-4678-beb7-239e6d560bf3", "record_id": "flaws_cloudtrail:0000288:edc7f9f3-4b25-4678-beb7-239e6d560bf3", "row_index": 288, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edc7f9f3-4b25-4678-beb7-239e6d560bf3", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "222c3df0-5e30-4f0b-8b24-a5d85895c8a6", "record_id": "flaws_cloudtrail:0000289:222c3df0-5e30-4f0b-8b24-a5d85895c8a6", "row_index": 289, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAWO1FJW0XUJH29UH4", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "222c3df0-5e30-4f0b-8b24-a5d85895c8a6", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWO1FJW0XUJH29UH4", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "486c6faf-9403-4003-9d80-62abd4d988b6", "record_id": "flaws_cloudtrail:0000290:486c6faf-9403-4003-9d80-62abd4d988b6", "row_index": 290, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "486c6faf-9403-4003-9d80-62abd4d988b6", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b9c95ca-d2df-4037-9813-50773af172", "record_id": "flaws_cloudtrail:0000291:0b9c95ca-d2df-4037-9813-50773af172", "row_index": 291, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b9c95ca-d2df-4037-9813-50773af172", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcc72750-b382-40e7-8bd2-9d4bb7d70c75", "record_id": "flaws_cloudtrail:0000292:bcc72750-b382-40e7-8bd2-9d4bb7d70c75", "row_index": 292, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcc72750-b382-40e7-8bd2-9d4bb7d70c75", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b78dffa-4efb-45ca-b75e-e09b5f5040dc", "record_id": "flaws_cloudtrail:0000293:7b78dffa-4efb-45ca-b75e-e09b5f5040dc", "row_index": 293, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b78dffa-4efb-45ca-b75e-e09b5f5040dc", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f8f4476-43bb-4797-b287-b2ac6d92d2d2", "record_id": "flaws_cloudtrail:0000294:5f8f4476-43bb-4797-b287-b2ac6d92d2d2", "row_index": 294, "timestamp": "2018-12-08T14:38:19Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f8f4476-43bb-4797-b287-b2ac6d92d2d2", "eventTime": "2018-12-08T14:38:19Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0f9ea0f-9c1e-43a0-a4db-8d3f1392537b", "record_id": "flaws_cloudtrail:0000295:d0f9ea0f-9c1e-43a0-a4db-8d3f1392537b", "row_index": 295, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAT017W5VU8CEG3LEX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0f9ea0f-9c1e-43a0-a4db-8d3f1392537b", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT017W5VU8CEG3LEX", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2cedb7e-67be-42f3-9a23-6510ffbbe3ef", "record_id": "flaws_cloudtrail:0000296:e2cedb7e-67be-42f3-9a23-6510ffbbe3ef", "row_index": 296, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2cedb7e-67be-42f3-9a23-6510ffbbe3ef", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dbddaf5-7b9a-41e4-b4da-1bdf5c5685a6", "record_id": "flaws_cloudtrail:0000297:6dbddaf5-7b9a-41e4-b4da-1bdf5c5685a6", "row_index": 297, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA9JEB3TWWUFAS4D9X", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dbddaf5-7b9a-41e4-b4da-1bdf5c5685a6", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9JEB3TWWUFAS4D9X", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "623ba45a-d7a4-4d78-a372-9aab033ecd47", "record_id": "flaws_cloudtrail:0000298:623ba45a-d7a4-4d78-a372-9aab033ecd47", "row_index": 298, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "623ba45a-d7a4-4d78-a372-9aab033ecd47", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fd2bc80-91c8-4c65-bc4e-06f9b702761a", "record_id": "flaws_cloudtrail:0000299:8fd2bc80-91c8-4c65-bc4e-06f9b702761a", "row_index": 299, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fd2bc80-91c8-4c65-bc4e-06f9b702761a", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ef5466f-3ded-4ef9-9261-db82c91cd6a9", "record_id": "flaws_cloudtrail:0000300:3ef5466f-3ded-4ef9-9261-db82c91cd6a9", "row_index": 300, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ef5466f-3ded-4ef9-9261-db82c91cd6a9", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a53cce0d-489f-43fa-8d92-d9a380cf4264", "record_id": "flaws_cloudtrail:0000301:a53cce0d-489f-43fa-8d92-d9a380cf4264", "row_index": 301, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a53cce0d-489f-43fa-8d92-d9a380cf4264", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401ed7ab-b38e-46b9-8d87-963beba0e395", "record_id": "flaws_cloudtrail:0000302:401ed7ab-b38e-46b9-8d87-963beba0e395", "row_index": 302, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401ed7ab-b38e-46b9-8d87-963beba0e395", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9edec18-5dd0-4df8-9b38-e814a903c881", "record_id": "flaws_cloudtrail:0000303:b9edec18-5dd0-4df8-9b38-e814a903c881", "row_index": 303, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA96D21FE7KGJVY5GH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9edec18-5dd0-4df8-9b38-e814a903c881", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA96D21FE7KGJVY5GH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff960141b-b81c-450a-a643-050ba890d5ae", "record_id": "flaws_cloudtrail:0000304:ff960141b-b81c-450a-a643-050ba890d5ae", "row_index": 304, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff960141b-b81c-450a-a643-050ba890d5ae", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a5ea5b-7605-4031-9638-f258500daa4f2", "record_id": "flaws_cloudtrail:0000305:b1a5ea5b-7605-4031-9638-f258500daa4f2", "row_index": 305, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a5ea5b-7605-4031-9638-f258500daa4f2", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf37de64-27a6-4a35-b835-04d0ac5470f8", "record_id": "flaws_cloudtrail:0000306:cf37de64-27a6-4a35-b835-04d0ac5470f8", "row_index": 306, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf37de64-27a6-4a35-b835-04d0ac5470f8", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4f30139-cf3b-4478-8af3-a1deb196e4e8", "record_id": "flaws_cloudtrail:0000307:f4f30139-cf3b-4478-8af3-a1deb196e4e8", "row_index": 307, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4f30139-cf3b-4478-8af3-a1deb196e4e8", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf6e69f1-4b4e-4f48-a237-bbab688ca4b6", "record_id": "flaws_cloudtrail:0000308:cf6e69f1-4b4e-4f48-a237-bbab688ca4b6", "row_index": 308, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf6e69f1-4b4e-4f48-a237-bbab688ca4b6", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "781292c-bda3-4fb8-887c-9bb96487f8c7", "record_id": "flaws_cloudtrail:0000309:781292c-bda3-4fb8-887c-9bb96487f8c7", "row_index": 309, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAD3WUIF1PHW0LDC1C", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "781292c-bda3-4fb8-887c-9bb96487f8c7", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAD3WUIF1PHW0LDC1C", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df9752b4-49b1-4350-9fd4-985d669bb1cb", "record_id": "flaws_cloudtrail:0000310:df9752b4-49b1-4350-9fd4-985d669bb1cb", "row_index": 310, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df9752b4-49b1-4350-9fd4-985d669bb1cb", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3359a7c-f8c8-4e27-80df-84a4c8a1dc97", "record_id": "flaws_cloudtrail:0000311:d3359a7c-f8c8-4e27-80df-84a4c8a1dc97", "row_index": 311, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3359a7c-f8c8-4e27-80df-84a4c8a1dc97", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e7ae72-fabe-4eac-bf63-4464a1e461a6", "record_id": "flaws_cloudtrail:0000312:82e7ae72-fabe-4eac-bf63-4464a1e461a6", "row_index": 312, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAIR7DNMFWL35MUGFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e7ae72-fabe-4eac-bf63-4464a1e461a6", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAIR7DNMFWL35MUGFW", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57cd4bd1-6c14-479a-8fb6-76b2aac024c5", "record_id": "flaws_cloudtrail:0000313:57cd4bd1-6c14-479a-8fb6-76b2aac024c5", "row_index": 313, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA3CJZIHX8GVQ772OJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57cd4bd1-6c14-479a-8fb6-76b2aac024c5", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA3CJZIHX8GVQ772OJ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8f79def-7361-491b-bba5-40d4b3d0dee3", "record_id": "flaws_cloudtrail:0000314:b8f79def-7361-491b-bba5-40d4b3d0dee3", "row_index": 314, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8f79def-7361-491b-bba5-40d4b3d0dee3", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a12fb8b2-ee63-49dd-a121-f592a49b921b", "record_id": "flaws_cloudtrail:0000315:a12fb8b2-ee63-49dd-a121-f592a49b921b", "row_index": 315, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a12fb8b2-ee63-49dd-a121-f592a49b921b", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2e5dca-27d0-4376-a93b-0553e4c39aab", "record_id": "flaws_cloudtrail:0000316:9b2e5dca-27d0-4376-a93b-0553e4c39aab", "row_index": 316, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2e5dca-27d0-4376-a93b-0553e4c39aab", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86532f1-ef8b-4dd2-bb5c-de0450ee28b8", "record_id": "flaws_cloudtrail:0000317:a86532f1-ef8b-4dd2-bb5c-de0450ee28b8", "row_index": 317, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86532f1-ef8b-4dd2-bb5c-de0450ee28b8", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51daa9fe-c638-4aac-a9fc-9b7e44c22df9", "record_id": "flaws_cloudtrail:0000318:51daa9fe-c638-4aac-a9fc-9b7e44c22df9", "row_index": 318, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51daa9fe-c638-4aac-a9fc-9b7e44c22df9", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b29c860e-8ce3-49fc-b82c-3fc116a2d10a", "record_id": "flaws_cloudtrail:0000319:b29c860e-8ce3-49fc-b82c-3fc116a2d10a", "row_index": 319, "timestamp": "2018-12-08T14:38:20Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b29c860e-8ce3-49fc-b82c-3fc116a2d10a", "eventTime": "2018-12-08T14:38:20Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed971a5f-4fea-43ae-9660-51f086fdc1ae", "record_id": "flaws_cloudtrail:0000320:ed971a5f-4fea-43ae-9660-51f086fdc1ae", "row_index": 320, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed971a5f-4fea-43ae-9660-51f086fdc1ae", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9953e6f7-3c1e-4400-bf21-f57737cf1f8c", "record_id": "flaws_cloudtrail:0000321:9953e6f7-3c1e-4400-bf21-f57737cf1f8c", "row_index": 321, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9953e6f7-3c1e-4400-bf21-f57737cf1f8c", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dd1dbf5-84f2-4354-845c-870d1f78b92c", "record_id": "flaws_cloudtrail:0000322:6dd1dbf5-84f2-4354-845c-870d1f78b92c", "row_index": 322, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dd1dbf5-84f2-4354-845c-870d1f78b92c", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e3efca-8366-41c1-85a2-74992b2d0a33", "record_id": "flaws_cloudtrail:0000323:36e3efca-8366-41c1-85a2-74992b2d0a33", "row_index": 323, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAWGIEDJWBDDAGHZ6U", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e3efca-8366-41c1-85a2-74992b2d0a33", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWGIEDJWBDDAGHZ6U", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:16Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dff34de-f0f7-492d-bff7-2ae55c7813ad", "record_id": "flaws_cloudtrail:0000324:4dff34de-f0f7-492d-bff7-2ae55c7813ad", "row_index": 324, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dff34de-f0f7-492d-bff7-2ae55c7813ad", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a751e7c-b7ae-4ed3-8ee2-475d200305", "record_id": "flaws_cloudtrail:0000325:2a751e7c-b7ae-4ed3-8ee2-475d200305", "row_index": 325, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a751e7c-b7ae-4ed3-8ee2-475d200305", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9789ed6b-9a0e-4598-841a-04bf5621b499", "record_id": "flaws_cloudtrail:0000326:9789ed6b-9a0e-4598-841a-04bf5621b499", "row_index": 326, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9789ed6b-9a0e-4598-841a-04bf5621b499", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f008eecb-fc77-4692-96ab-8e6501697fbf", "record_id": "flaws_cloudtrail:0000327:f008eecb-fc77-4692-96ab-8e6501697fbf", "row_index": 327, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f008eecb-fc77-4692-96ab-8e6501697fbf", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8693db43-6c6a-404a-9864-51ed82c010a2", "record_id": "flaws_cloudtrail:0000328:8693db43-6c6a-404a-9864-51ed82c010a2", "row_index": 328, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8693db43-6c6a-404a-9864-51ed82c010a2", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be54d6a-739c-45c3-8413-42735b0fcb38", "record_id": "flaws_cloudtrail:0000329:8be54d6a-739c-45c3-8413-42735b0fcb38", "row_index": 329, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be54d6a-739c-45c3-8413-42735b0fcb38", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71dd74b4-0845-479b-aebe-1222e13d98ff", "record_id": "flaws_cloudtrail:0000330:71dd74b4-0845-479b-aebe-1222e13d98ff", "row_index": 330, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIACYZX0BP44POW5LIL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71dd74b4-0845-479b-aebe-1222e13d98ff", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIACYZX0BP44POW5LIL", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02c712945-0b57-47bc-8d2f-cc8feddaec48", "record_id": "flaws_cloudtrail:0000331:02c712945-0b57-47bc-8d2f-cc8feddaec48", "row_index": 331, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02c712945-0b57-47bc-8d2f-cc8feddaec48", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72303-4b23-4aa2-9544-51836dece334", "record_id": "flaws_cloudtrail:0000332:72303-4b23-4aa2-9544-51836dece334", "row_index": 332, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72303-4b23-4aa2-9544-51836dece334", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d04656-9f2e-43cf-ada9-cd0efd0ebebe", "record_id": "flaws_cloudtrail:0000333:d04656-9f2e-43cf-ada9-cd0efd0ebebe", "row_index": 333, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d04656-9f2e-43cf-ada9-cd0efd0ebebe", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04bcf439-8884-4c99-a138-b3ca474bc9c9", "record_id": "flaws_cloudtrail:0000334:04bcf439-8884-4c99-a138-b3ca474bc9c9", "row_index": 334, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04bcf439-8884-4c99-a138-b3ca474bc9c9", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611f3ebe-12a1-4ed8-ad7c-6beb7aaaa404", "record_id": "flaws_cloudtrail:0000335:611f3ebe-12a1-4ed8-ad7c-6beb7aaaa404", "row_index": 335, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611f3ebe-12a1-4ed8-ad7c-6beb7aaaa404", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15ea074c-4291-4a5d-9968-2514eb2770c3", "record_id": "flaws_cloudtrail:0000336:15ea074c-4291-4a5d-9968-2514eb2770c3", "row_index": 336, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15ea074c-4291-4a5d-9968-2514eb2770c3", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bec4cb3a-2b3d-49ba-ba13-c8f0cb019896", "record_id": "flaws_cloudtrail:0000337:bec4cb3a-2b3d-49ba-ba13-c8f0cb019896", "row_index": 337, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bec4cb3a-2b3d-49ba-ba13-c8f0cb019896", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60440-2bfd-4eea-91aa-70a3c6c13b01", "record_id": "flaws_cloudtrail:0000338:60440-2bfd-4eea-91aa-70a3c6c13b01", "row_index": 338, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60440-2bfd-4eea-91aa-70a3c6c13b01", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2d33ed9-5245-4490-b5dd-497932e973bc", "record_id": "flaws_cloudtrail:0000339:f2d33ed9-5245-4490-b5dd-497932e973bc", "row_index": 339, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2d33ed9-5245-4490-b5dd-497932e973bc", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfd87f11-5019-46eb-88c9-4e61cb841ed1", "record_id": "flaws_cloudtrail:0000340:dfd87f11-5019-46eb-88c9-4e61cb841ed1", "row_index": 340, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfd87f11-5019-46eb-88c9-4e61cb841ed1", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18a1c57c-f87f-4134-8702-8dfb92c6e355", "record_id": "flaws_cloudtrail:0000341:18a1c57c-f87f-4134-8702-8dfb92c6e355", "row_index": 341, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18a1c57c-f87f-4134-8702-8dfb92c6e355", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3267af69-71c7-403a-a247-4cd47c5c4cbe", "record_id": "flaws_cloudtrail:0000342:3267af69-71c7-403a-a247-4cd47c5c4cbe", "row_index": 342, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3267af69-71c7-403a-a247-4cd47c5c4cbe", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abd17ef1-0fa5-4366-8f9b-d63940abe257", "record_id": "flaws_cloudtrail:0000343:abd17ef1-0fa5-4366-8f9b-d63940abe257", "row_index": 343, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abd17ef1-0fa5-4366-8f9b-d63940abe257", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4635bcc1-03ba-4b2a-88dd-227ae809c2d1", "record_id": "flaws_cloudtrail:0000344:4635bcc1-03ba-4b2a-88dd-227ae809c2d1", "row_index": 344, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4635bcc1-03ba-4b2a-88dd-227ae809c2d1", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002859f0-cfdb-49c9-b2f2-8d3df4bdc207", "record_id": "flaws_cloudtrail:0000345:002859f0-cfdb-49c9-b2f2-8d3df4bdc207", "row_index": 345, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002859f0-cfdb-49c9-b2f2-8d3df4bdc207", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d9263f-4dab-407a-a203-602c769cd8df", "record_id": "flaws_cloudtrail:0000346:42d9263f-4dab-407a-a203-602c769cd8df", "row_index": 346, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d9263f-4dab-407a-a203-602c769cd8df", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b64c67f-86b3-408b-806d-a9da54f5142d", "record_id": "flaws_cloudtrail:0000347:4b64c67f-86b3-408b-806d-a9da54f5142d", "row_index": 347, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b64c67f-86b3-408b-806d-a9da54f5142d", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9653dbe2-3f76-45fd-b3e3-2825e0cfaee8", "record_id": "flaws_cloudtrail:0000348:9653dbe2-3f76-45fd-b3e3-2825e0cfaee8", "row_index": 348, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9653dbe2-3f76-45fd-b3e3-2825e0cfaee8", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85f188b8-e270-46b8-8740-88d4ea7eed63", "record_id": "flaws_cloudtrail:0000349:85f188b8-e270-46b8-8740-88d4ea7eed63", "row_index": 349, "timestamp": "2018-12-08T14:38:21Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85f188b8-e270-46b8-8740-88d4ea7eed63", "eventTime": "2018-12-08T14:38:21Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d90e9a-d1bb-422f-9347-c13910", "record_id": "flaws_cloudtrail:0000350:50d90e9a-d1bb-422f-9347-c13910", "row_index": 350, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d90e9a-d1bb-422f-9347-c13910", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da8fd1fd-11b6-4b95-85af-adc14ce3df7c", "record_id": "flaws_cloudtrail:0000351:da8fd1fd-11b6-4b95-85af-adc14ce3df7c", "row_index": 351, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVCWYJ6PNTYHIP2AH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da8fd1fd-11b6-4b95-85af-adc14ce3df7c", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVCWYJ6PNTYHIP2AH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:22Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51f21360-3b34-41ff-b3b5-799103d5f777", "record_id": "flaws_cloudtrail:0000352:51f21360-3b34-41ff-b3b5-799103d5f777", "row_index": 352, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAAHS5YDITEIV6RRPZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51f21360-3b34-41ff-b3b5-799103d5f777", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAHS5YDITEIV6RRPZ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4faeede3-d7d1-4c9d-b1cd-63b12cbc0dcb", "record_id": "flaws_cloudtrail:0000353:4faeede3-d7d1-4c9d-b1cd-63b12cbc0dcb", "row_index": 353, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4faeede3-d7d1-4c9d-b1cd-63b12cbc0dcb", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "718fd768-58cd-4f2d-86c3-ceb9a1815e8a", "record_id": "flaws_cloudtrail:0000354:718fd768-58cd-4f2d-86c3-ceb9a1815e8a", "row_index": 354, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "718fd768-58cd-4f2d-86c3-ceb9a1815e8a", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9cec6b-51c1-4d94-85aa-92270228b90a", "record_id": "flaws_cloudtrail:0000355:0e9cec6b-51c1-4d94-85aa-92270228b90a", "row_index": 355, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVOEHEHVQO5H8BZDJ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9cec6b-51c1-4d94-85aa-92270228b90a", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVOEHEHVQO5H8BZDJ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:22Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d8c343a-f2d4-4157-beeb-c923b61447d8", "record_id": "flaws_cloudtrail:0000356:8d8c343a-f2d4-4157-beeb-c923b61447d8", "row_index": 356, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d8c343a-f2d4-4157-beeb-c923b61447d8", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "660b229e-a119-419e-a76e-17b7210880b0", "record_id": "flaws_cloudtrail:0000357:660b229e-a119-419e-a76e-17b7210880b0", "row_index": 357, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "660b229e-a119-419e-a76e-17b7210880b0", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4efbf8e0-e815-48b5-85af-fd30afc6e1c7", "record_id": "flaws_cloudtrail:0000358:4efbf8e0-e815-48b5-85af-fd30afc6e1c7", "row_index": 358, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4efbf8e0-e815-48b5-85af-fd30afc6e1c7", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e20b63-2396-4ddd-b2d4-eaf24b72da4b", "record_id": "flaws_cloudtrail:0000359:06e20b63-2396-4ddd-b2d4-eaf24b72da4b", "row_index": 359, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e20b63-2396-4ddd-b2d4-eaf24b72da4b", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "555d1b45-4ee5-42bc-afe6-e9cb14316", "record_id": "flaws_cloudtrail:0000360:555d1b45-4ee5-42bc-afe6-e9cb14316", "row_index": 360, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "555d1b45-4ee5-42bc-afe6-e9cb14316", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "376ab555-92fa-4d69-95f7-d9bcdf7efb44", "record_id": "flaws_cloudtrail:0000361:376ab555-92fa-4d69-95f7-d9bcdf7efb44", "row_index": 361, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "376ab555-92fa-4d69-95f7-d9bcdf7efb44", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc99c037-dcbe-4a5e-8156-b5c0957bed5b", "record_id": "flaws_cloudtrail:0000362:cc99c037-dcbe-4a5e-8156-b5c0957bed5b", "row_index": 362, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIANSTXFY5EMQ3YK78E", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc99c037-dcbe-4a5e-8156-b5c0957bed5b", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIANSTXFY5EMQ3YK78E", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:21Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "139e6d4a-71c5-4706-a9b9-c74476ce56e", "record_id": "flaws_cloudtrail:0000363:139e6d4a-71c5-4706-a9b9-c74476ce56e", "row_index": 363, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "139e6d4a-71c5-4706-a9b9-c74476ce56e", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55a6dad2-6c21-4634-8d0b-5a35429e8709", "record_id": "flaws_cloudtrail:0000364:55a6dad2-6c21-4634-8d0b-5a35429e8709", "row_index": 364, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55a6dad2-6c21-4634-8d0b-5a35429e8709", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bb9d3d8-2a51-4674-87d7-577507d164779", "record_id": "flaws_cloudtrail:0000365:7bb9d3d8-2a51-4674-87d7-577507d164779", "row_index": 365, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bb9d3d8-2a51-4674-87d7-577507d164779", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411a4f75-231d-4536-92f0-c651377b8634", "record_id": "flaws_cloudtrail:0000366:411a4f75-231d-4536-92f0-c651377b8634", "row_index": 366, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411a4f75-231d-4536-92f0-c651377b8634", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1def1e23-681d-447e-aa97-14a5ea4bed7e", "record_id": "flaws_cloudtrail:0000367:1def1e23-681d-447e-aa97-14a5ea4bed7e", "row_index": 367, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1def1e23-681d-447e-aa97-14a5ea4bed7e", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df9fe0b-0a9e-47ca-ac63-163297c7ee12", "record_id": "flaws_cloudtrail:0000368:7df9fe0b-0a9e-47ca-ac63-163297c7ee12", "row_index": 368, "timestamp": "2018-12-08T14:38:22Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA5Y8S8DDDXPJCYXOQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df9fe0b-0a9e-47ca-ac63-163297c7ee12", "eventTime": "2018-12-08T14:38:22Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA5Y8S8DDDXPJCYXOQ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T14:38:21Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91ee9c68-4511-4e1f-81f9-f37aad288a22", "record_id": "flaws_cloudtrail:0000369:91ee9c68-4511-4e1f-81f9-f37aad288a22", "row_index": 369, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91ee9c68-4511-4e1f-81f9-f37aad288a22", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b628a9-89a5-44af-85db-93093bb16c92", "record_id": "flaws_cloudtrail:0000370:d7b628a9-89a5-44af-85db-93093bb16c92", "row_index": 370, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b628a9-89a5-44af-85db-93093bb16c92", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b7702e7-7394-47d2-a835-9ef2e5e6d1b2", "record_id": "flaws_cloudtrail:0000371:6b7702e7-7394-47d2-a835-9ef2e5e6d1b2", "row_index": 371, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b7702e7-7394-47d2-a835-9ef2e5e6d1b2", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb432cfa-52e4-4c2c-bea2-e22a246cfbad", "record_id": "flaws_cloudtrail:0000372:fb432cfa-52e4-4c2c-bea2-e22a246cfbad", "row_index": 372, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb432cfa-52e4-4c2c-bea2-e22a246cfbad", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76c595e5-8f80-4cef-873a-63bf50c3a8dc", "record_id": "flaws_cloudtrail:0000373:76c595e5-8f80-4cef-873a-63bf50c3a8dc", "row_index": 373, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76c595e5-8f80-4cef-873a-63bf50c3a8dc", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87390-b64a-409e-8d73-307ce9b5949b", "record_id": "flaws_cloudtrail:0000374:87390-b64a-409e-8d73-307ce9b5949b", "row_index": 374, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87390-b64a-409e-8d73-307ce9b5949b", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "245d0655-d614-428f-a7d9-391f5f56dee1", "record_id": "flaws_cloudtrail:0000375:245d0655-d614-428f-a7d9-391f5f56dee1", "row_index": 375, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "245d0655-d614-428f-a7d9-391f5f56dee1", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e025611-c302-442c-ad33-1577f4e9b67a", "record_id": "flaws_cloudtrail:0000376:e025611-c302-442c-ad33-1577f4e9b67a", "row_index": 376, "timestamp": "2018-12-08T14:38:24Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e025611-c302-442c-ad33-1577f4e9b67a", "eventTime": "2018-12-08T14:38:24Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c409f3c9-5b56-4296-a4bb-f44cc2fd7c1b", "record_id": "flaws_cloudtrail:0000377:c409f3c9-5b56-4296-a4bb-f44cc2fd7c1b", "row_index": 377, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c409f3c9-5b56-4296-a4bb-f44cc2fd7c1b", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac1ce11c-d8eb-4fcb-be4e-a543ed0c9f77", "record_id": "flaws_cloudtrail:0000378:ac1ce11c-d8eb-4fcb-be4e-a543ed0c9f77", "row_index": 378, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac1ce11c-d8eb-4fcb-be4e-a543ed0c9f77", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2724b86-2370-4d4b-983f-4e167383e926", "record_id": "flaws_cloudtrail:0000379:f2724b86-2370-4d4b-983f-4e167383e926", "row_index": 379, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2724b86-2370-4d4b-983f-4e167383e926", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41f79c2-906c-475e-95de-74a6bce09b28", "record_id": "flaws_cloudtrail:0000380:f41f79c2-906c-475e-95de-74a6bce09b28", "row_index": 380, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41f79c2-906c-475e-95de-74a6bce09b28", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "debd16bb-d068-4618-8a22-1afbd01c8400", "record_id": "flaws_cloudtrail:0000381:debd16bb-d068-4618-8a22-1afbd01c8400", "row_index": 381, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "debd16bb-d068-4618-8a22-1afbd01c8400", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec4475c4-da37-4a30-9209-8cdb59461c", "record_id": "flaws_cloudtrail:0000382:ec4475c4-da37-4a30-9209-8cdb59461c", "row_index": 382, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec4475c4-da37-4a30-9209-8cdb59461c", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0235d1a7-95fe-4331-801a-b2823305ac54", "record_id": "flaws_cloudtrail:0000383:0235d1a7-95fe-4331-801a-b2823305ac54", "row_index": 383, "timestamp": "2018-12-08T14:38:25Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0235d1a7-95fe-4331-801a-b2823305ac54", "eventTime": "2018-12-08T14:38:25Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cc14d3b-9f3c-44c5-8694-1188c8ba8d89", "record_id": "flaws_cloudtrail:0000384:3cc14d3b-9f3c-44c5-8694-1188c8ba8d89", "row_index": 384, "timestamp": "2018-12-08T14:38:27Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cc14d3b-9f3c-44c5-8694-1188c8ba8d89", "eventTime": "2018-12-08T14:38:27Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17ca5d7a-6b1a-4c24-814a-f357137c3cfb", "record_id": "flaws_cloudtrail:0000385:17ca5d7a-6b1a-4c24-814a-f357137c3cfb", "row_index": 385, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17ca5d7a-6b1a-4c24-814a-f357137c3cfb", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62fc5ad2-0889-4e72-97a8-6e593b317224", "record_id": "flaws_cloudtrail:0000386:62fc5ad2-0889-4e72-97a8-6e593b317224", "row_index": 386, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62fc5ad2-0889-4e72-97a8-6e593b317224", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e780866b-e585-41b6-8f12-329f4ab9c11b", "record_id": "flaws_cloudtrail:0000387:3e780866b-e585-41b6-8f12-329f4ab9c11b", "row_index": 387, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e780866b-e585-41b6-8f12-329f4ab9c11b", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1babab6a-7df5-425c-9275-9767d14e34a2", "record_id": "flaws_cloudtrail:0000388:1babab6a-7df5-425c-9275-9767d14e34a2", "row_index": 388, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1babab6a-7df5-425c-9275-9767d14e34a2", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f414f741-6ca1-4952-bda0-6ce8167c02d5", "record_id": "flaws_cloudtrail:0000389:f414f741-6ca1-4952-bda0-6ce8167c02d5", "row_index": 389, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f414f741-6ca1-4952-bda0-6ce8167c02d5", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09851-4cc0-4cb0-9462-a182981", "record_id": "flaws_cloudtrail:0000390:09851-4cc0-4cb0-9462-a182981", "row_index": 390, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09851-4cc0-4cb0-9462-a182981", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23af6d6f-2b07-4b89-a966-0ba3f8b862fa", "record_id": "flaws_cloudtrail:0000391:23af6d6f-2b07-4b89-a966-0ba3f8b862fa", "row_index": 391, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23af6d6f-2b07-4b89-a966-0ba3f8b862fa", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c580f7b-2326-4633-b960-9efbf8bdc403", "record_id": "flaws_cloudtrail:0000392:5c580f7b-2326-4633-b960-9efbf8bdc403", "row_index": 392, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c580f7b-2326-4633-b960-9efbf8bdc403", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e8de73f-d812-4de4-9737-d6c97d20467", "record_id": "flaws_cloudtrail:0000393:2e8de73f-d812-4de4-9737-d6c97d20467", "row_index": 393, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e8de73f-d812-4de4-9737-d6c97d20467", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991ab882-20e8-423b-b026-dd7935b5013a", "record_id": "flaws_cloudtrail:0000394:991ab882-20e8-423b-b026-dd7935b5013a", "row_index": 394, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991ab882-20e8-423b-b026-dd7935b5013a", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1111da-1b1b-4c4b-ae86-11f0f0d477cf", "record_id": "flaws_cloudtrail:0000395:ea1111da-1b1b-4c4b-ae86-11f0f0d477cf", "row_index": 395, "timestamp": "2018-12-08T14:38:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1111da-1b1b-4c4b-ae86-11f0f0d477cf", "eventTime": "2018-12-08T14:38:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d0a2014-97dc-4817-b155-a725b3806d4c", "record_id": "flaws_cloudtrail:0000396:1d0a2014-97dc-4817-b155-a725b3806d4c", "row_index": 396, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d0a2014-97dc-4817-b155-a725b3806d4c", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9d060516-8933-4fff-9335-4b11afa502991", "record_id": "flaws_cloudtrail:0000397:b9d060516-8933-4fff-9335-4b11afa502991", "row_index": 397, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9d060516-8933-4fff-9335-4b11afa502991", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409f1b5b-5127-4462-9646-b95b111bc500", "record_id": "flaws_cloudtrail:0000398:409f1b5b-5127-4462-9646-b95b111bc500", "row_index": 398, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409f1b5b-5127-4462-9646-b95b111bc500", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b297905-d762-416e-8a69-382cc1f9cb79", "record_id": "flaws_cloudtrail:0000399:b297905-d762-416e-8a69-382cc1f9cb79", "row_index": 399, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b297905-d762-416e-8a69-382cc1f9cb79", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "004a654a-2550-4b84-bace-ebac835d939d", "record_id": "flaws_cloudtrail:0000400:004a654a-2550-4b84-bace-ebac835d939d", "row_index": 400, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "004a654a-2550-4b84-bace-ebac835d939d", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e49be3c-ff0b-4079-9b11-7c8ea669c0e9", "record_id": "flaws_cloudtrail:0000401:9e49be3c-ff0b-4079-9b11-7c8ea669c0e9", "row_index": 401, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e49be3c-ff0b-4079-9b11-7c8ea669c0e9", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5d3f9dc-86e0-4210-ba35-27af1d074388", "record_id": "flaws_cloudtrail:0000402:a5d3f9dc-86e0-4210-ba35-27af1d074388", "row_index": 402, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5d3f9dc-86e0-4210-ba35-27af1d074388", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d33330-d9d1-4a12-83dc-ce52eb386f16", "record_id": "flaws_cloudtrail:0000403:8d33330-d9d1-4a12-83dc-ce52eb386f16", "row_index": 403, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d33330-d9d1-4a12-83dc-ce52eb386f16", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c98645-8c24-4c4b-a3cd-674b2a93ce08", "record_id": "flaws_cloudtrail:0000404:2c98645-8c24-4c4b-a3cd-674b2a93ce08", "row_index": 404, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c98645-8c24-4c4b-a3cd-674b2a93ce08", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f5f594e-9156-4abd-9c80-96dfaf3a6804", "record_id": "flaws_cloudtrail:0000405:9f5f594e-9156-4abd-9c80-96dfaf3a6804", "row_index": 405, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f5f594e-9156-4abd-9c80-96dfaf3a6804", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b59f44ca-0b9f-497b-b4b1-896744f2a8d22", "record_id": "flaws_cloudtrail:0000406:b59f44ca-0b9f-497b-b4b1-896744f2a8d22", "row_index": 406, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b59f44ca-0b9f-497b-b4b1-896744f2a8d22", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58bc8276-84b8-4e40-a223-999415bc7af1", "record_id": "flaws_cloudtrail:0000407:58bc8276-84b8-4e40-a223-999415bc7af1", "row_index": 407, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58bc8276-84b8-4e40-a223-999415bc7af1", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5edf8c7-0d61-4aa8-a850-04491b3525", "record_id": "flaws_cloudtrail:0000408:e5edf8c7-0d61-4aa8-a850-04491b3525", "row_index": 408, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5edf8c7-0d61-4aa8-a850-04491b3525", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9cec9ed-5240-43ec-8c16-c7c9aec468ff", "record_id": "flaws_cloudtrail:0000409:f9cec9ed-5240-43ec-8c16-c7c9aec468ff", "row_index": 409, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9cec9ed-5240-43ec-8c16-c7c9aec468ff", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4656fbb-a54e-4215-b0d3-020b3bf20c39", "record_id": "flaws_cloudtrail:0000410:a4656fbb-a54e-4215-b0d3-020b3bf20c39", "row_index": 410, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4656fbb-a54e-4215-b0d3-020b3bf20c39", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aceb05a2-7ea5-453e-abdb-5219039623f1", "record_id": "flaws_cloudtrail:0000411:aceb05a2-7ea5-453e-abdb-5219039623f1", "row_index": 411, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aceb05a2-7ea5-453e-abdb-5219039623f1", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb653fc0-443e-4781-b83f-5497e6c94039", "record_id": "flaws_cloudtrail:0000412:eb653fc0-443e-4781-b83f-5497e6c94039", "row_index": 412, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb653fc0-443e-4781-b83f-5497e6c94039", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0097da6-643d-40c1-981c-3b8f930014cb", "record_id": "flaws_cloudtrail:0000413:a0097da6-643d-40c1-981c-3b8f930014cb", "row_index": 413, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0097da6-643d-40c1-981c-3b8f930014cb", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "041c3507-7ca6-4ff1-b165-418c8aa0a60f", "record_id": "flaws_cloudtrail:0000414:041c3507-7ca6-4ff1-b165-418c8aa0a60f", "row_index": 414, "timestamp": "2018-12-08T14:38:32Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "041c3507-7ca6-4ff1-b165-418c8aa0a60f", "eventTime": "2018-12-08T14:38:32Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a45ebd3-5675-4aa5-8417-8b1a6d976935e", "record_id": "flaws_cloudtrail:0000415:3a45ebd3-5675-4aa5-8417-8b1a6d976935e", "row_index": 415, "timestamp": "2018-12-08T14:38:33Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a45ebd3-5675-4aa5-8417-8b1a6d976935e", "eventTime": "2018-12-08T14:38:33Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d067524-7677-44b6-ae68-bc9cf179e236", "record_id": "flaws_cloudtrail:0000416:d7d067524-7677-44b6-ae68-bc9cf179e236", "row_index": 416, "timestamp": "2018-12-08T14:38:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d067524-7677-44b6-ae68-bc9cf179e236", "eventTime": "2018-12-08T14:38:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d531214-c50c-47d9-bf99-bd7c8ab453684", "record_id": "flaws_cloudtrail:0000417:0d531214-c50c-47d9-bf99-bd7c8ab453684", "row_index": 417, "timestamp": "2018-12-08T14:38:34Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d531214-c50c-47d9-bf99-bd7c8ab453684", "eventTime": "2018-12-08T14:38:34Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75f22cf4-11a1-4f78-a649-8ec7759d2f46", "record_id": "flaws_cloudtrail:0000418:75f22cf4-11a1-4f78-a649-8ec7759d2f46", "row_index": 418, "timestamp": "2018-12-08T14:38:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75f22cf4-11a1-4f78-a649-8ec7759d2f46", "eventTime": "2018-12-08T14:38:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2bee099-35b5-4c9c-9132-1006b140e56e", "record_id": "flaws_cloudtrail:0000419:b2bee099-35b5-4c9c-9132-1006b140e56e", "row_index": 419, "timestamp": "2018-12-08T14:38:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2bee099-35b5-4c9c-9132-1006b140e56e", "eventTime": "2018-12-08T14:38:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b68c99d1-4d94-4b5d-a42f-c2f0da3fe2d6", "record_id": "flaws_cloudtrail:0000420:b68c99d1-4d94-4b5d-a42f-c2f0da3fe2d6", "row_index": 420, "timestamp": "2018-12-08T14:38:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b68c99d1-4d94-4b5d-a42f-c2f0da3fe2d6", "eventTime": "2018-12-08T14:38:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff08582b-6ec3-48bf-a300-81c02ec6aa3b", "record_id": "flaws_cloudtrail:0000421:ff08582b-6ec3-48bf-a300-81c02ec6aa3b", "row_index": 421, "timestamp": "2018-12-08T14:38:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff08582b-6ec3-48bf-a300-81c02ec6aa3b", "eventTime": "2018-12-08T14:38:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b997b23-2e52-44be-8535-6fd78ae7051e", "record_id": "flaws_cloudtrail:0000422:4b997b23-2e52-44be-8535-6fd78ae7051e", "row_index": 422, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b997b23-2e52-44be-8535-6fd78ae7051e", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0da463755-536a-4cef-bfe8-8c02f159ce90", "record_id": "flaws_cloudtrail:0000423:0da463755-536a-4cef-bfe8-8c02f159ce90", "row_index": 423, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0da463755-536a-4cef-bfe8-8c02f159ce90", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "841764d55-0fb9-4b0f-8b8e-0ca6efe54f35", "record_id": "flaws_cloudtrail:0000424:841764d55-0fb9-4b0f-8b8e-0ca6efe54f35", "row_index": 424, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "841764d55-0fb9-4b0f-8b8e-0ca6efe54f35", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5156bee2-441c-4adf-8808-ffd24bea8d7a", "record_id": "flaws_cloudtrail:0000425:5156bee2-441c-4adf-8808-ffd24bea8d7a", "row_index": 425, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5156bee2-441c-4adf-8808-ffd24bea8d7a", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2c0a3a4-ceec-4c5d-b165-83ec5eb65d13", "record_id": "flaws_cloudtrail:0000426:c2c0a3a4-ceec-4c5d-b165-83ec5eb65d13", "row_index": 426, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2c0a3a4-ceec-4c5d-b165-83ec5eb65d13", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb5181d-57a2-43f0-aaac-e84b0474663a", "record_id": "flaws_cloudtrail:0000427:6cb5181d-57a2-43f0-aaac-e84b0474663a", "row_index": 427, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb5181d-57a2-43f0-aaac-e84b0474663a", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d4fd852-e174-4de9-b9da-7ec8bb6e3468", "record_id": "flaws_cloudtrail:0000428:4d4fd852-e174-4de9-b9da-7ec8bb6e3468", "row_index": 428, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d4fd852-e174-4de9-b9da-7ec8bb6e3468", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9906a34-7815-41bc-b75d-d6f9652a9e41", "record_id": "flaws_cloudtrail:0000429:c9906a34-7815-41bc-b75d-d6f9652a9e41", "row_index": 429, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9906a34-7815-41bc-b75d-d6f9652a9e41", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39deb579-d078-4235-9778-3a14024d6d5", "record_id": "flaws_cloudtrail:0000430:39deb579-d078-4235-9778-3a14024d6d5", "row_index": 430, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39deb579-d078-4235-9778-3a14024d6d5", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad5e6602-6792-48ba-934f-94326759f9de", "record_id": "flaws_cloudtrail:0000431:ad5e6602-6792-48ba-934f-94326759f9de", "row_index": 431, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad5e6602-6792-48ba-934f-94326759f9de", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab4da09d-96ec-446b-847b-764d46a7abbf", "record_id": "flaws_cloudtrail:0000432:ab4da09d-96ec-446b-847b-764d46a7abbf", "row_index": 432, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab4da09d-96ec-446b-847b-764d46a7abbf", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2d89a49-df69-46f2-9c46-b73e7a90a8e8", "record_id": "flaws_cloudtrail:0000433:a2d89a49-df69-46f2-9c46-b73e7a90a8e8", "row_index": 433, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2d89a49-df69-46f2-9c46-b73e7a90a8e8", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50c662d3-6bc5-4830-b5af-a2fbcc89e2b3", "record_id": "flaws_cloudtrail:0000434:50c662d3-6bc5-4830-b5af-a2fbcc89e2b3", "row_index": 434, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50c662d3-6bc5-4830-b5af-a2fbcc89e2b3", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2b254e7-a827-460d-87bf-e42bb69c8e6d", "record_id": "flaws_cloudtrail:0000435:e2b254e7-a827-460d-87bf-e42bb69c8e6d", "row_index": 435, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2b254e7-a827-460d-87bf-e42bb69c8e6d", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cae3d99d-ed09-4464-a360-52c97df6cbb6", "record_id": "flaws_cloudtrail:0000436:cae3d99d-ed09-4464-a360-52c97df6cbb6", "row_index": 436, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cae3d99d-ed09-4464-a360-52c97df6cbb6", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8476b87f-afec-47b6-829c-08cd6f6b6e70", "record_id": "flaws_cloudtrail:0000437:8476b87f-afec-47b6-829c-08cd6f6b6e70", "row_index": 437, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8476b87f-afec-47b6-829c-08cd6f6b6e70", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29bcc0bd-df40-4542-b285-3e6bccdcbe66", "record_id": "flaws_cloudtrail:0000438:29bcc0bd-df40-4542-b285-3e6bccdcbe66", "row_index": 438, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29bcc0bd-df40-4542-b285-3e6bccdcbe66", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3d49fe-4a7b-4494-bb23-9d89b697ef9f", "record_id": "flaws_cloudtrail:0000439:1c3d49fe-4a7b-4494-bb23-9d89b697ef9f", "row_index": 439, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3d49fe-4a7b-4494-bb23-9d89b697ef9f", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a550bf6a-9f6d-4c6e-8877-a8840b21a0e0", "record_id": "flaws_cloudtrail:0000440:a550bf6a-9f6d-4c6e-8877-a8840b21a0e0", "row_index": 440, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a550bf6a-9f6d-4c6e-8877-a8840b21a0e0", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153edd9d-0bbf-4fdb-b1ea-a7b7c9b0f644", "record_id": "flaws_cloudtrail:0000441:153edd9d-0bbf-4fdb-b1ea-a7b7c9b0f644", "row_index": 441, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153edd9d-0bbf-4fdb-b1ea-a7b7c9b0f644", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3fefdcf-470a-4e68-ad03-e7f5e89c4bd2", "record_id": "flaws_cloudtrail:0000442:d3fefdcf-470a-4e68-ad03-e7f5e89c4bd2", "row_index": 442, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3fefdcf-470a-4e68-ad03-e7f5e89c4bd2", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e2d76ac-b644-4183-b886-faf9b84eac81", "record_id": "flaws_cloudtrail:0000443:9e2d76ac-b644-4183-b886-faf9b84eac81", "row_index": 443, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e2d76ac-b644-4183-b886-faf9b84eac81", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57f762df-6510-4afe-8eef-b9d6915068a4", "record_id": "flaws_cloudtrail:0000444:57f762df-6510-4afe-8eef-b9d6915068a4", "row_index": 444, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57f762df-6510-4afe-8eef-b9d6915068a4", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ffed610-fc07-407d-bbfd-9d4fafaf4a91", "record_id": "flaws_cloudtrail:0000445:8ffed610-fc07-407d-bbfd-9d4fafaf4a91", "row_index": 445, "timestamp": "2018-12-08T14:38:35Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ffed610-fc07-407d-bbfd-9d4fafaf4a91", "eventTime": "2018-12-08T14:38:35Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b2718b4-177d-4ec5-9975-e95d96aee7f4", "record_id": "flaws_cloudtrail:0000446:4b2718b4-177d-4ec5-9975-e95d96aee7f4", "row_index": 446, "timestamp": "2018-12-08T14:38:36Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b2718b4-177d-4ec5-9975-e95d96aee7f4", "eventTime": "2018-12-08T14:38:36Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "Boto3/1.9.62 Python/2.7.15 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c52eb0-4adc-4af9-8167-19a9fb97fa15", "record_id": "flaws_cloudtrail:0000447:f9c52eb0-4adc-4af9-8167-19a9fb97fa15", "row_index": 447, "timestamp": "2018-12-08T14:41:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "[aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c52eb0-4adc-4af9-8167-19a9fb97fa15", "eventTime": "2018-12-08T14:41:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "[aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "460ca0ee-2efa-4ae5-ac6d-898cef401fee", "record_id": "flaws_cloudtrail:0000448:460ca0ee-2efa-4ae5-ac6d-898cef401fee", "row_index": 448, "timestamp": "2018-12-08T14:43:40Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "460ca0ee-2efa-4ae5-ac6d-898cef401fee", "eventTime": "2018-12-08T14:43:40Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a831f98-5568-4653-af3c-574ae85b85ca", "record_id": "flaws_cloudtrail:0000449:2a831f98-5568-4653-af3c-574ae85b85ca", "row_index": 449, "timestamp": "2018-12-08T14:44:26Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a831f98-5568-4653-af3c-574ae85b85ca", "eventTime": "2018-12-08T14:44:26Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7d531ae-041f-424e-abaa-275fbdd837d5", "record_id": "flaws_cloudtrail:0000450:b7d531ae-041f-424e-abaa-275fbdd837d5", "row_index": 450, "timestamp": "2018-12-08T14:46:00Z", "event_type": "GetExport", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7d531ae-041f-424e-abaa-275fbdd837d5", "eventTime": "2018-12-08T14:46:00Z", "eventName": "GetExport", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid stage identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stageName": "dev", "accepts": "application/json", "exportType": "swagger", "restApiId": "s33ppypa75"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32ffffdd-2bea-41ba-bdd4-ee94c24a2d5a", "record_id": "flaws_cloudtrail:0000451:32ffffdd-2bea-41ba-bdd4-ee94c24a2d5a", "row_index": 451, "timestamp": "2018-12-08T14:46:23Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32ffffdd-2bea-41ba-bdd4-ee94c24a2d5a", "eventTime": "2018-12-08T14:46:23Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e8c3ba7-e6ae-4cbc-aed3-e3f9f2eaa78a", "record_id": "flaws_cloudtrail:0000452:5e8c3ba7-e6ae-4cbc-aed3-e3f9f2eaa78a", "row_index": 452, "timestamp": "2018-12-08T14:46:32Z", "event_type": "GetExport", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e8c3ba7-e6ae-4cbc-aed3-e3f9f2eaa78a", "eventTime": "2018-12-08T14:46:32Z", "eventName": "GetExport", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stageName": "Prod", "accepts": "application/json", "exportType": "swagger", "restApiId": "s33ppypa75"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94e6e8b4-7e0f-4af6-bdb0-1d4e2a20cd86", "record_id": "flaws_cloudtrail:0000453:94e6e8b4-7e0f-4af6-bdb0-1d4e2a20cd86", "row_index": 453, "timestamp": "2018-12-08T14:47:42Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94e6e8b4-7e0f-4af6-bdb0-1d4e2a20cd86", "eventTime": "2018-12-08T14:47:42Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4f849d-9f2c-4377-82d9-c60a86120b75", "record_id": "flaws_cloudtrail:0000454:bf4f849d-9f2c-4377-82d9-c60a86120b75", "row_index": 454, "timestamp": "2018-12-08T14:48:30Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4f849d-9f2c-4377-82d9-c60a86120b75", "eventTime": "2018-12-08T14:48:30Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apikeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f349f4-4834-4f53-a079-5fca0f7ec467", "record_id": "flaws_cloudtrail:0000455:d7f349f4-4834-4f53-a079-5fca0f7ec467", "row_index": 455, "timestamp": "2018-12-08T15:02:48Z", "event_type": "DescribeStacks", "event_source": "opsworks.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f349f4-4834-4f53-a079-5fca0f7ec467", "eventTime": "2018-12-08T15:02:48Z", "eventName": "DescribeStacks", "eventSource": "opsworks.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "818a2de1-e160-49f6-aff5-fbbea9c245a9", "record_id": "flaws_cloudtrail:0000456:818a2de1-e160-49f6-aff5-fbbea9c245a9", "row_index": 456, "timestamp": "2018-12-08T15:04:31Z", "event_type": "ListFindings", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "818a2de1-e160-49f6-aff5-fbbea9c245a9", "eventTime": "2018-12-08T15:04:31Z", "eventName": "ListFindings", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListFindings", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c6d78fd-e7d3-4e63-8a3c-f9e7c8baa366", "record_id": "flaws_cloudtrail:0000457:3c6d78fd-e7d3-4e63-8a3c-f9e7c8baa366", "row_index": 457, "timestamp": "2018-12-08T15:05:06Z", "event_type": "ListAssessmentRuns", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c6d78fd-e7d3-4e63-8a3c-f9e7c8baa366", "eventTime": "2018-12-08T15:05:06Z", "eventName": "ListAssessmentRuns", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListAssessmentRuns", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e11bdde-16b0-40b2-9b6d-d8cb92d16522", "record_id": "flaws_cloudtrail:0000458:8e11bdde-16b0-40b2-9b6d-d8cb92d16522", "row_index": 458, "timestamp": "2018-12-08T15:06:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e11bdde-16b0-40b2-9b6d-d8cb92d16522", "eventTime": "2018-12-08T15:06:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f72a3df-e1c2-4248-8b9d-4c1ed4d1f7e7", "record_id": "flaws_cloudtrail:0000459:5f72a3df-e1c2-4248-8b9d-4c1ed4d1f7e7", "row_index": 459, "timestamp": "2018-12-08T15:07:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f72a3df-e1c2-4248-8b9d-4c1ed4d1f7e7", "eventTime": "2018-12-08T15:07:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d188737a-6908-422a-b40a-5656b3faded9", "record_id": "flaws_cloudtrail:0000460:d188737a-6908-422a-b40a-5656b3faded9", "row_index": 460, "timestamp": "2018-12-08T15:09:41Z", "event_type": "ListAssessmentRuns", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d188737a-6908-422a-b40a-5656b3faded9", "eventTime": "2018-12-08T15:09:41Z", "eventName": "ListAssessmentRuns", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:ListAssessmentRuns", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da82d50f-dc55-42ca-826d-768207b318b1", "record_id": "flaws_cloudtrail:0000461:da82d50f-dc55-42ca-826d-768207b318b1", "row_index": 461, "timestamp": "2018-12-08T15:11:15Z", "event_type": "DescribeAssessmentRuns", "event_source": "inspector.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da82d50f-dc55-42ca-826d-768207b318b1", "eventTime": "2018-12-08T15:11:15Z", "eventName": "DescribeAssessmentRuns", "eventSource": "inspector.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: inspector:DescribeAssessmentRuns", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85849cf8-dedb-4dde-b1ac-7e02c8e9c99a", "record_id": "flaws_cloudtrail:0000462:85849cf8-dedb-4dde-b1ac-7e02c8e9c99a", "row_index": 462, "timestamp": "2018-12-08T15:12:16Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85849cf8-dedb-4dde-b1ac-7e02c8e9c99a", "eventTime": "2018-12-08T15:12:16Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c5a625d-909a-4f1e-b397-fdb03f7a6d1b", "record_id": "flaws_cloudtrail:0000463:0c5a625d-909a-4f1e-b397-fdb03f7a6d1b", "row_index": 463, "timestamp": "2018-12-08T15:12:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c5a625d-909a-4f1e-b397-fdb03f7a6d1b", "eventTime": "2018-12-08T15:12:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANBYTAR20Z0BBK6FE", "expiration": "Dec 8, 2018 9:47:56 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da7e5baa-7354-4500-86d6-d389edf630938", "record_id": "flaws_cloudtrail:0000464:da7e5baa-7354-4500-86d6-d389edf630938", "row_index": 464, "timestamp": "2018-12-08T15:13:56Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da7e5baa-7354-4500-86d6-d389edf630938", "eventTime": "2018-12-08T15:13:56Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e76aecd-7906-4242-a52a-867f34e805dd", "record_id": "flaws_cloudtrail:0000465:8e76aecd-7906-4242-a52a-867f34e805dd", "row_index": 465, "timestamp": "2018-12-08T15:14:45Z", "event_type": "GetExport", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e76aecd-7906-4242-a52a-867f34e805dd", "eventTime": "2018-12-08T15:14:45Z", "eventName": "GetExport", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stageName": "Prod", "accepts": "application/json", "exportType": "swagger", "restApiId": "s33ppypa75"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "014daeb8-f1ff-413b-8f5e-51ed7e8b9327", "record_id": "flaws_cloudtrail:0000466:014daeb8-f1ff-413b-8f5e-51ed7e8b9327", "row_index": 466, "timestamp": "2018-12-08T15:14:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA4DPPW7JXZ9COQ2B6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.158.96.182", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "014daeb8-f1ff-413b-8f5e-51ed7e8b9327", "eventTime": "2018-12-08T15:14:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.158.96.182", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA4DPPW7JXZ9COQ2B6", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b68455-714f-4e7a-8925-2263ee0350aa", "record_id": "flaws_cloudtrail:0000467:f5b68455-714f-4e7a-8925-2263ee0350aa", "row_index": 467, "timestamp": "2018-12-08T15:15:51Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA4DPPW7JXZ9COQ2B6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.158.96.182", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b68455-714f-4e7a-8925-2263ee0350aa", "eventTime": "2018-12-08T15:15:51Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.158.96.182", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA4DPPW7JXZ9COQ2B6", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2388d5c3-16b6-4637-8a32-3387d497f4d1", "record_id": "flaws_cloudtrail:0000468:2388d5c3-16b6-4637-8a32-3387d497f4d1", "row_index": 468, "timestamp": "2018-12-08T15:16:45Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2388d5c3-16b6-4637-8a32-3387d497f4d1", "eventTime": "2018-12-08T15:16:45Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a438887b-b7bc-4e3a-b994-f38283f1c31", "record_id": "flaws_cloudtrail:0000469:7a438887b-b7bc-4e3a-b994-f38283f1c31", "row_index": 469, "timestamp": "2018-12-08T15:17:35Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a438887b-b7bc-4e3a-b994-f38283f1c31", "eventTime": "2018-12-08T15:17:35Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21bed086-2587-412e-8fd5-125703cc0a10", "record_id": "flaws_cloudtrail:0000470:21bed086-2587-412e-8fd5-125703cc0a10", "row_index": 470, "timestamp": "2018-12-08T15:17:36Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA4DPPW7JXZ9COQ2B6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.158.96.182", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 568, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21bed086-2587-412e-8fd5-125703cc0a10", "eventTime": "2018-12-08T15:17:36Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.158.96.182", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA4DPPW7JXZ9COQ2B6", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4aa9b46-4a92-4101-b51e-7f7a009fd9d3", "record_id": "flaws_cloudtrail:0000471:b4aa9b46-4a92-4101-b51e-7f7a009fd9d3", "row_index": 471, "timestamp": "2018-12-08T15:18:08Z", "event_type": "GetAuthorizers", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4aa9b46-4a92-4101-b51e-7f7a009fd9d3", "eventTime": "2018-12-08T15:18:08Z", "eventName": "GetAuthorizers", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bf72ce0-b5bf-41f3-9ca5-8b4cd773ae0c", "record_id": "flaws_cloudtrail:0000472:9bf72ce0-b5bf-41f3-9ca5-8b4cd773ae0c", "row_index": 472, "timestamp": "2018-12-08T15:18:43Z", "event_type": "GetModels", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bf72ce0-b5bf-41f3-9ca5-8b4cd773ae0c", "eventTime": "2018-12-08T15:18:43Z", "eventName": "GetModels", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481829-aa7b-4b0b-85fa-94affd9a5b81", "record_id": "flaws_cloudtrail:0000473:481829-aa7b-4b0b-85fa-94affd9a5b81", "row_index": 473, "timestamp": "2018-12-08T15:19:06Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481829-aa7b-4b0b-85fa-94affd9a5b81", "eventTime": "2018-12-08T15:19:06Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d8e52d1-b361-4da9-9d14-20e7a4ab457a", "record_id": "flaws_cloudtrail:0000474:2d8e52d1-b361-4da9-9d14-20e7a4ab457a", "row_index": 474, "timestamp": "2018-12-08T15:19:59Z", "event_type": "GetApiKeys", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.126.52.72", "user_agent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d8e52d1-b361-4da9-9d14-20e7a4ab457a", "eventTime": "2018-12-08T15:19:59Z", "eventName": "GetApiKeys", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.126.52.72", "userAgent": "aws-cli/1.16.50 Python/3.7.1 Darwin/18.0.0 botocore/1.12.40", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apikeys", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b03ac7f-e671-47a6-a4ba-4de27ff5bf19", "record_id": "flaws_cloudtrail:0000475:8b03ac7f-e671-47a6-a4ba-4de27ff5bf19", "row_index": 475, "timestamp": "2018-12-08T15:20:26Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA4DPPW7JXZ9COQ2B6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.158.96.182", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/Level6-bot-941"], "raw_record_size_bytes": 642, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b03ac7f-e671-47a6-a4ba-4de27ff5bf19", "eventTime": "2018-12-08T15:20:26Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.158.96.182", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA4DPPW7JXZ9COQ2B6", "userName": "Level6"}, "requestParameters": {"userName": "Level6-bot-941"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/Level6-bot-941"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b7b5725-8245-4f13-98ff-a2c0492ac65a", "record_id": "flaws_cloudtrail:0000476:4b7b5725-8245-4f13-98ff-a2c0492ac65a", "row_index": 476, "timestamp": "2018-12-08T15:20:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1212, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b7b5725-8245-4f13-98ff-a2c0492ac65a", "eventTime": "2018-12-08T15:20:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA278MK4T7TLXFWRH7", "expiration": "Dec 9, 2018 3:20:44 AM", "sessionToken": "FQoGZXIvYXdzEDkaDOPBZc6FvQyhjppXUSLfAfnkXWcwerRL8YefDajoI4Nlyeq3HaLg1irB4eIs8tW4ouGrRHBun+YomiqbDWAwZGBCzs+RKmka+9z7ma3jeoJX+jfV1vl19FSrzfpZxqT2oOabxob5olaGHDVUE6RNrSLDDDvWURmyEm4i+lfm2gVGBRdUnArPac/PyufvJzJgUaDRyt1tMgSbbQozaXl5u9hORWADMbI0zu2su8fZHr18dzgjmz+RZH4+44kgwAnbh9TP0Lql8Cmtxd/WDWMjq6xfiyQuoYB2epu11uDVyJWtO40J5Ag3gy9mBQmaMpMozMKv4AU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc42e019-085e-4a42-a93a-7eaa54af7f20", "record_id": "flaws_cloudtrail:0000477:dc42e019-085e-4a42-a93a-7eaa54af7f20", "row_index": 477, "timestamp": "2018-12-08T15:20:44Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA278MK4T7TLXFWRH7", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "177.5.250.76", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc42e019-085e-4a42-a93a-7eaa54af7f20", "eventTime": "2018-12-08T15:20:44Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "177.5.250.76", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA278MK4T7TLXFWRH7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-08T15:20:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2018/12/08/[$LATEST]f93962885fe285f364fa26e3ae1f7f92"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f5811cf-2bab-411f-ac3d-06636e61b3a3", "record_id": "flaws_cloudtrail:0000478:2f5811cf-2bab-411f-ac3d-06636e61b3a3", "row_index": 478, "timestamp": "2018-12-08T15:20:57Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA4DPPW7JXZ9COQ2B6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.158.96.182", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/Level6-bot-941"], "raw_record_size_bytes": 647, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f5811cf-2bab-411f-ac3d-06636e61b3a3", "eventTime": "2018-12-08T15:20:57Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.158.96.182", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA4DPPW7JXZ9COQ2B6", "userName": "Level6"}, "requestParameters": {"userName": "Level6-bot-941"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/Level6-bot-941"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605ea672-4c43-412f-ac43-03762af394c1", "record_id": "flaws_cloudtrail:0000479:605ea672-4c43-412f-ac43-03762af394c1", "row_index": 479, "timestamp": "2018-12-08T15:21:36Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA4DPPW7JXZ9COQ2B6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "57.158.96.182", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/Level6-bot-941", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605ea672-4c43-412f-ac43-03762af394c1", "eventTime": "2018-12-08T15:21:36Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "57.158.96.182", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA4DPPW7JXZ9COQ2B6", "userName": "Level6"}, "requestParameters": {"userName": "Level6-bot-941", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/Level6-bot-941"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6922a999-672c-47d5-a87f-241ca6666db5", "record_id": "flaws_cloudtrail:0000480:6922a999-672c-47d5-a87f-241ca6666db5", "row_index": 480, "timestamp": "2018-12-08T16:12:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1482, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6922a999-672c-47d5-a87f-241ca6666db5", "eventTime": "2018-12-08T16:12:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPZ83DANG5465T5I6", "expiration": "Dec 8, 2018 10:47:07 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d411200-7e83-41f3-8c86-66a4cbd183e3", "record_id": "flaws_cloudtrail:0000481:48d411200-7e83-41f3-8c86-66a4cbd183e3", "row_index": 481, "timestamp": "2018-12-08T17:12:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1483, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d411200-7e83-41f3-8c86-66a4cbd183e3", "eventTime": "2018-12-08T17:12:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ4U1BXS4FDMNMNWL", "expiration": "Dec 8, 2018 11:14:13 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16481aa-78b8-49d4-be72-68370c15f3", "record_id": "flaws_cloudtrail:0000482:f16481aa-78b8-49d4-be72-68370c15f3", "row_index": 482, "timestamp": "2018-12-08T18:01:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1921, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16481aa-78b8-49d4-be72-68370c15f3", "eventTime": "2018-12-08T18:01:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWE4SZFW475FJ6FV2", "expiration": "Dec 8, 2018 7:01:01 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3357b152-2855-4c64-879c-dd6975c3e7e7", "record_id": "flaws_cloudtrail:0000483:3357b152-2855-4c64-879c-dd6975c3e7e7", "row_index": 483, "timestamp": "2018-12-08T18:12:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1473, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3357b152-2855-4c64-879c-dd6975c3e7e7", "eventTime": "2018-12-08T18:12:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEP9WUJBQ7I6CZ8E4", "expiration": "Dec 9, 2018 12:33:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61183be-a430-4730-aefd-3cec22540f95", "record_id": "flaws_cloudtrail:0000484:61183be-a430-4730-aefd-3cec22540f95", "row_index": 484, "timestamp": "2018-12-08T19:12:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1480, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61183be-a430-4730-aefd-3cec22540f95", "eventTime": "2018-12-08T19:12:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXCOASA67HSHXK2MC", "expiration": "Dec 9, 2018 1:42:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "066669acd-37a6-4bcc-a8ae-bac484c19fd2", "record_id": "flaws_cloudtrail:0000485:066669acd-37a6-4bcc-a8ae-bac484c19fd2", "row_index": 485, "timestamp": "2018-12-08T20:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1482, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "066669acd-37a6-4bcc-a8ae-bac484c19fd2", "eventTime": "2018-12-08T20:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB66CB5OFUSGBCD1D", "expiration": "Dec 9, 2018 2:13:49 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f0b6c1-63b6-4c75-a654-22720d526d8", "record_id": "flaws_cloudtrail:0000486:c0f0b6c1-63b6-4c75-a654-22720d526d8", "row_index": 486, "timestamp": "2018-12-08T21:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f0b6c1-63b6-4c75-a654-22720d526d8", "eventTime": "2018-12-08T21:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUQZ583820ZMVC5JZ", "expiration": "Dec 9, 2018 3:23:46 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b39f45b-85a7-49c9-93f5-01358dba7efa", "record_id": "flaws_cloudtrail:0000487:4b39f45b-85a7-49c9-93f5-01358dba7efa", "row_index": 487, "timestamp": "2018-12-08T22:12:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1481, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b39f45b-85a7-49c9-93f5-01358dba7efa", "eventTime": "2018-12-08T22:12:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1VW9LJEUYXIGHLNS", "expiration": "Dec 9, 2018 4:37:27 AM", "sessionToken": "FQoGZXIvYXdzEEAaDK4HfNq0/QpLfSB1AiK3A3tBv59Sio+Mti3LlHG16x7gugPchqzqFy+zvdGxEw6iygaC8M1XmieNJ4hjFHI9yLnof1234p5k6aF6rFHHtKd1okbeEeVS+zBgEmuR0pwiBd76aAftzEiieD6Db0hODxUhBrlJdilDY0mmsUezoKfsfc4Dwut2Nc4z216WHOUA0hVP4LpLLe8s9YWOId/6e1dw+Q1CItjFGAjR0FDTRgBXD8gQZcJXYdz5UrH4o83Oo5EOtTu8XK6Ejjn6FbZ2dBdXipyWhLoloOtIySrH9Pdb9EArltE67c5sUPF8YZE2U8bl2uPMI9xz9Q8lt7IMrqk94Hp7oGm51Z0tgoJhPkMZ6CrQ8s7OkNA45AKiTqBpWfo+pDr76sesrIsZwkCFMJBNfN4qs3APeRD35miQZL6dmAIzDnE+lQJd0YgkLLzYIuEuDgFcYhdhCAI49F6KH12WUqmGHBVp+lM+3zNIIxLn7uT0693OItgWkltYWJOXVI4SFXRm6wFB5Qw0vA/euVuMoIX6tzXgtk1HeL5xYj3cC9Npa8Pe+MVPl+N2QiF4BVFA0iW5Rr0CG8pn/k6GuDSf65JNwm8o5IOx4AU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ac7d98-6249-418a-87db-1ef89893a64e", "record_id": "flaws_cloudtrail:0000488:47ac7d98-6249-418a-87db-1ef89893a64e", "row_index": 488, "timestamp": "2018-12-08T23:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1481, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ac7d98-6249-418a-87db-1ef89893a64e", "eventTime": "2018-12-08T23:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANB1UIHG0CMX6UVL7", "expiration": "Dec 9, 2018 5:17:07 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea7858d4-20f4-4b36-98f8-27d218e10aed", "record_id": "flaws_cloudtrail:0000489:ea7858d4-20f4-4b36-98f8-27d218e10aed", "row_index": 489, "timestamp": "2018-12-09T00:01:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1932, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea7858d4-20f4-4b36-98f8-27d218e10aed", "eventTime": "2018-12-09T00:01:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUP0ZV4WSVB4XNVAE", "expiration": "Dec 9, 2018 1:01:11 AM", "sessionToken": "AgoGb3JpZ2luEIT//////////wEaCXVzLXdlc3QtMiKAAhQKh62QCM0T4J6PoSBJdYdnRI0bsDZQx8Wtl3erBANNCR0JjtH1I40uWmshlwwn5aCwhDYz+Bu3IFHY71X68b4f1PqxUFvOO3V14n4lfFzowBzikDbX+NoosRGlFTnCPBPqylPLENTb078G+TVoPY90fJPBA4/l2c55pl/dfAR1//ToUv5Gv6BF7+N4j96Z9C52jqne+uvli5tZZHLUCXBHXXYf3P0L4B0PqYc9Lreir1kc1GomZtT183TL9/d4qcMlwAdlmNEfxDb2PPnieWLcmBSKf8QhKC9i6QCcfHbuWkyQ7M4sFJAUXYbXI1pXHWl/CqlXBTQ65fXFJDhbau4q6AIIORAAGgw5NzU0MjYyNjIwMjkiDHVUmB+hUzcWP1l6kSrFAn5vdTYj5lXrarJKAk5sS+mtXqCHBhfNYe4528wftnh1oz/f9H5i20FsJNtUZsDo4bBXWGKAK1g3STwpcyAB1JMJH9a3+EmFKQqdS4mrt5ruTF/lHQVlCGLGK0HZMrRRd7wxV3tQHSNG0GCKWXACuWu7YqNp47Q1HoF05PxIUxekHZRxiOJs0wFipovAo/PhgCUGALwRVM3pbAw+XrxB+cNsSd/HhJYfe7dmcfBgyFABaTRvywhCJX6Gc9eOwLhNWBkN12S7TAnYPLfE66ltVg3rvadf+faMh/N9DcysRqb9jTb5HnbeHMnhwj9nPc15N03Rq3tHj+9d6mx4ymbKJSSmGyMTeP76CB56LB+drLfMzv6aQZ91HIm+0m2zRwZEaom28km56UNLdRMxD3avMW5qUg4G/UkvUCZhluRZKSwYfAnGQ7wwx7ax4AU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1b82f2f-31c3-49af-9402-3d235467deb9f", "record_id": "flaws_cloudtrail:0000490:a1b82f2f-31c3-49af-9402-3d235467deb9f", "row_index": 490, "timestamp": "2018-12-09T00:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1482, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1b82f2f-31c3-49af-9402-3d235467deb9f", "eventTime": "2018-12-09T00:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFBZYTBM0SYSHSS88", "expiration": "Dec 9, 2018 6:37:25 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c00414b-a747-4a20-828e-50327647d31f", "record_id": "flaws_cloudtrail:0000491:0c00414b-a747-4a20-828e-50327647d31f", "row_index": 491, "timestamp": "2018-12-09T00:39:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c00414b-a747-4a20-828e-50327647d31f", "eventTime": "2018-12-09T00:39:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "570023cfc-99de-4f87-bcb4-eebb89f05b8c", "record_id": "flaws_cloudtrail:0000492:570023cfc-99de-4f87-bcb4-eebb89f05b8c", "row_index": 492, "timestamp": "2018-12-09T00:48:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "570023cfc-99de-4f87-bcb4-eebb89f05b8c", "eventTime": "2018-12-09T00:48:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bef543-bf08-4d54-aef7-5d970bb3b2d7", "record_id": "flaws_cloudtrail:0000493:a7bef543-bf08-4d54-aef7-5d970bb3b2d7", "row_index": 493, "timestamp": "2018-12-09T00:50:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bef543-bf08-4d54-aef7-5d970bb3b2d7", "eventTime": "2018-12-09T00:50:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317266c8-aa97-4012-92e9-119914aed7f34", "record_id": "flaws_cloudtrail:0000494:317266c8-aa97-4012-92e9-119914aed7f34", "row_index": 494, "timestamp": "2018-12-09T00:52:58Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317266c8-aa97-4012-92e9-119914aed7f34", "eventTime": "2018-12-09T00:52:58Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86c2e8d9-2040-4e5c-b83d-b843cb05620a", "record_id": "flaws_cloudtrail:0000495:86c2e8d9-2040-4e5c-b83d-b843cb05620a", "row_index": 495, "timestamp": "2018-12-09T01:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1481, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86c2e8d9-2040-4e5c-b83d-b843cb05620a", "eventTime": "2018-12-09T01:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3MJ6H5PR90MDRSNF", "expiration": "Dec 9, 2018 7:14:39 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "873e3d9b-adb4-4944-a3eb-55c820811b82", "record_id": "flaws_cloudtrail:0000496:873e3d9b-adb4-4944-a3eb-55c820811b82", "row_index": 496, "timestamp": "2018-12-09T02:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1479, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "873e3d9b-adb4-4944-a3eb-55c820811b82", "eventTime": "2018-12-09T02:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPR6JFB8LX639C2FE", "expiration": "Dec 9, 2018 8:19:16 AM", "sessionToken": "FQoGZXIvYXdzEEQaDDmSdSwJfsgj2mp3yiK3A19z29QY8jIgfb+HNtwCOsAzk/yVkRtxTlOecWoxPaok249Thxn4jDvC57J87nn45EBjTdWoE1+I2mVnWiNlLcoo54mmjXCeYfvZWtabdvZWAbxpKdfzIiPmHFYwTyh5SoEf51yZQv+Vsnh3qxC56KRmXMg6PeSUM9zrTeIxEv7f58713xFiF3ycHi+3xi7AITqlXB27By4quYOGxcxQByBJJ++s2NSKtqX2cXCjL2NDRTIlh3G9J82tRnLkXn6Dg/oIbi51dnh/g5iz+rXqIksQ0NP5lbGmEwiLATRrzQU5NMclpcsX4i4Lx3OzdMLDp4f/YPGpsxtGp4cm9dkuIkJXYIGrX1iFiyZGdG+IdvYgnAI2krTznMkPAePwVxEC18lsIragbsn+0hYiqDNV1o52nDxFFjqu83QYwvj2WxQA67e5yOA9xJHUpn6tsJDqoj5x2WJ59UQiMjSFccITyiI4kdG916Q4BpjZVf2TLGMSP+/iI8GmRD4RIDws+ipeQ4mE4crONOBKRQREsAr+CR2t4V3EQ064Zf6ssIOiyluEQ9ycwRXryg7k912zCCD+VTJtT6C8GcIopfSx4AU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0709a8-4814-4a16-8954-7110a0463f0f", "record_id": "flaws_cloudtrail:0000497:3d0709a8-4814-4a16-8954-7110a0463f0f", "row_index": 497, "timestamp": "2018-12-09T02:29:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "[aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0709a8-4814-4a16-8954-7110a0463f0f", "eventTime": "2018-12-09T02:29:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "[aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1e1ec9-841e-43bd-9c40-3ad14820ca4d", "record_id": "flaws_cloudtrail:0000498:7e1e1ec9-841e-43bd-9c40-3ad14820ca4d", "row_index": 498, "timestamp": "2018-12-09T03:12:46Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAA0HJ3GGSDJ6YW1UX", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "110.254.180.111", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1e1ec9-841e-43bd-9c40-3ad14820ca4d", "eventTime": "2018-12-09T03:12:46Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "110.254.180.111", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAA0HJ3GGSDJ6YW1UX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2018/12/09/[$LATEST]9b6746f8cdbee3cfcba2c3cd108be68a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6fd58eb-ee5e-4280-97b9-7a2c334c2c68", "record_id": "flaws_cloudtrail:0000499:b6fd58eb-ee5e-4280-97b9-7a2c334c2c68", "row_index": 499, "timestamp": "2018-12-09T03:12:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1212, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6fd58eb-ee5e-4280-97b9-7a2c334c2c68", "eventTime": "2018-12-09T03:12:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA0HJ3GGSDJ6YW1UX", "expiration": "Dec 9, 2018 3:12:46 PM", "sessionToken": "FQoGZXIvYXdzEEUaDA0tjSPsr3HHiZI2niLfAV96HeR2/wJ5bnsF9EIrtty2YHbv4iz6gfGx1R4DtbVqzYiq/9DLjbjOUS2UMWUNFe9ouO85IXG28q+x170FvMiZjmPa3xCYUxb0I8s9GU2syDIoAasgBaJ5iYj5YauE4ZwmOkl53bvi25tM9GF+/80ELN9jLF+NZI8hNVp0K4ArPv8ctEL+S124awGuXdUJ5LtW0gdl3njnxMohVBmnqZJYIOjv9v7j/5U/Ow/bZjTlLnMhlFKWvr9OwCfAArRq1+l/1m4u8eLBkJL0f+4ssSmz3jQkkDNjLs+rwhVFHHcorpCy4AU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ae6748f-0122-4a4d-b8ee-41a7377ea74d", "record_id": "flaws_cloudtrail:0000500:8ae6748f-0122-4a4d-b8ee-41a7377ea74d", "row_index": 500, "timestamp": "2018-12-09T03:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1481, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ae6748f-0122-4a4d-b8ee-41a7377ea74d", "eventTime": "2018-12-09T03:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN0E14RGQLAFQXX95", "expiration": "Dec 9, 2018 9:19:04 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ed6eff1-4416-4751-bd43-6e138ce37c3e", "record_id": "flaws_cloudtrail:0000501:4ed6eff1-4416-4751-bd43-6e138ce37c3e", "row_index": 501, "timestamp": "2018-12-09T03:40:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "[Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ed6eff1-4416-4751-bd43-6e138ce37c3e", "eventTime": "2018-12-09T03:40:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "[Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dc4206d-f803-4c8d-aa92-54300c8fe21d", "record_id": "flaws_cloudtrail:0000502:9dc4206d-f803-4c8d-aa92-54300c8fe21d", "row_index": 502, "timestamp": "2018-12-09T03:44:04Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dc4206d-f803-4c8d-aa92-54300c8fe21d", "eventTime": "2018-12-09T03:44:04Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb3795b9-5eed-4444-8d15-090c1645a257", "record_id": "flaws_cloudtrail:0000503:bb3795b9-5eed-4444-8d15-090c1645a257", "row_index": 503, "timestamp": "2018-12-09T03:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb3795b9-5eed-4444-8d15-090c1645a257", "eventTime": "2018-12-09T03:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a4f81a4-29da-499e-91e7-daeac882e69e", "record_id": "flaws_cloudtrail:0000504:0a4f81a4-29da-499e-91e7-daeac882e69e", "row_index": 504, "timestamp": "2018-12-09T03:46:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a4f81a4-29da-499e-91e7-daeac882e69e", "eventTime": "2018-12-09T03:46:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXODhQZG43K2prcjRoT2hzTUsxN28rMy9UNTFUYUc5NjhEaEdzTUdjT0NxU3ZJOG03dmFWMFlvZWlLaTR3YnlVL0tJREhoRTZpY3NLdjRMVHk2QitYR3ZESWdQQmtWUExLdnowemh5Nkp0YjhXOFRuTUhrZG1ibUFuV2VvbkpkZ1FOUERlcDhRZlVhR3FBRUJpM3lMNld1VWVVMTJRRWZLV2ovTko2OGpJZkJLZU95WW5NcUUxWktaU2hzdVpqaWg4REZTZk9qVnlHWFlqQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aa96b27-5116-409b-a4c1-5e92d993a4d4", "record_id": "flaws_cloudtrail:0000505:1aa96b27-5116-409b-a4c1-5e92d993a4d4", "row_index": 505, "timestamp": "2018-12-09T03:46:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aa96b27-5116-409b-a4c1-5e92d993a4d4", "eventTime": "2018-12-09T03:46:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSklibU1YM09lUGFKaHhscjlPeVpnWVhkYVhGdHlkMXUrMGJFR3BwNmNwanNpMmRGTzdKc3M0NldBR29uRlBWVk9aU3Q2VkU4dnE4REk2K3lINDlTNzB2dzFVRXBVdkhaby9lUk5vMTF3cFVsMEtoTWJkaTFQWExTaE5CbzNEVjNPT0ZhUmliTUsxb0I4eXpFeTdiQllpOFYzRlBvektvYlAxeWFxSjBJeVB0VVRsNkxjRUcwckpoTjNUUVhLdm9WaW11MWtjb2ltUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1b57276-9220-4eac-9c71-9d2aa97af248", "record_id": "flaws_cloudtrail:0000506:f1b57276-9220-4eac-9c71-9d2aa97af248", "row_index": 506, "timestamp": "2018-12-09T03:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1b57276-9220-4eac-9c71-9d2aa97af248", "eventTime": "2018-12-09T03:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsYkhtK3VnblZCUWhyQXZkeDdmZ21nU2oxSFp5S2FaVHMxR2p1ZlI2Q2l1OG5oNVBVR2lWUFB3MlRxK09QdXVGVXhIOXpjS1lXNUl5d3dmb2dWZXluTUlZcFZXUmUrNy9PVXEzWEZLWDNRdHZTTkRWNk45dnZkRnREOFJYckppN2paam5YWTR0T0JSeGdJZ3phU3BReG9HOGZFQUVMNDM2VVhSS3JhenBrVU9XWm5BVnk3K21kQkI0YzhZSk5UNXUwTjZiQkJyVXFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05ef7822-a4be-432d-8fde-e8e381c1488b", "record_id": "flaws_cloudtrail:0000507:05ef7822-a4be-432d-8fde-e8e381c1488b", "row_index": 507, "timestamp": "2018-12-09T03:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05ef7822-a4be-432d-8fde-e8e381c1488b", "eventTime": "2018-12-09T03:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHbFBRVUZKSHAyc0NqT1RiYklVL3JyTHFHMndxRzF4LzRFMUdFaSt3S2wxeEdCQ3ZVMDJtcjBpUXpCaDZ6aTlCekJuMjljMFhXZEh6U3kvV3JKa2RWc0V1ZWFwcXJibHZsYzdjdkY3VVFwRjVMNW41Qi9SL2hUeXB0eXFTc2s2MjQ2eTM2WUdEOTZOL1lXeG8rR0cyQVVEcFMxRCtxZEV3ai80VlphdkhFbzFoRVoxeWE2cTgrMDNGMENzQWU2Q0FjdkdNM0NqNUM3bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb5e9015-ecb7-4968-8cbb-3c30355d6583", "record_id": "flaws_cloudtrail:0000508:cb5e9015-ecb7-4968-8cbb-3c30355d6583", "row_index": 508, "timestamp": "2018-12-09T03:46:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb5e9015-ecb7-4968-8cbb-3c30355d6583", "eventTime": "2018-12-09T03:46:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFdTB4QWVuR1AyWXk2UzcwRzB3bHNXU1lDbjRjZWR3dFpGTlprdUdOeUIydUgyRWp6S3FveEhyajJ6cHVlb2lhOGtRME1taHAzYmx5MzRNcFp4bWo5NmZWN0NFT0hrcnpMWDlzaCs3bklBWjh1M1V6cXhYM3czZjgwUUdmMnRUeTk0NzlnRis5MTN6eEZ3d04rczFyWnpIeTI3aWs0MFhvV3Z1MmxmRVgyckZ1TGpuSXlHbVhyN3M4d3VOYmhZU29JZ1AydGhFRmtwai9WQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "973b4e87-650f-48d2-9089-7ddf77f9b5bf", "record_id": "flaws_cloudtrail:0000509:973b4e87-650f-48d2-9089-7ddf77f9b5bf", "row_index": 509, "timestamp": "2018-12-09T03:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "973b4e87-650f-48d2-9089-7ddf77f9b5bf", "eventTime": "2018-12-09T03:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1bUxIUVBqUFE2MXU5QVQvM01tUjBiZkJmMUVMci9NM2RKRlhIOXJTRTE2NU5NekNrdjFvbm5NZ0xEWGczb1h2WVBtRDZaSEJkTWp6WnVQSU14YVVOaVMwODl0NmNFdUlKRkJIV0hMYXowZVFnQkdBUmNhLytWY3g4S2QyT0pXQ2s0WUR6RUxreXdjckhqalhMb3pCcUs3ODR3aXhOVncra2J3SzhjMHNuRkhwaitVZmNTdExuRDF0VUF0ZjRIZVdPNlBsdEVhRWtBOGx5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9820ecb-cb12-4054-a4e3-b44cf9b5a1e9", "record_id": "flaws_cloudtrail:0000510:c9820ecb-cb12-4054-a4e3-b44cf9b5a1e9", "row_index": 510, "timestamp": "2018-12-09T03:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9820ecb-cb12-4054-a4e3-b44cf9b5a1e9", "eventTime": "2018-12-09T03:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzOEJvbzNHSG5lL1V6VnMxQUwvbVpXRzh6OTlORXFQUit5TmwyWHg1Rjc4VFpNc3MyeEdNeW1TTzVlNFBoRDBOdGlDRjV0R1h5RHd1bXRLTGxPR3VMQVVBUUx4TFFSUFdTQTBHWFBJRWxleGxTVVkvWUtJbDVBU3hJeENhZkhOZEQyb2JiZm9kT2h0SWVzb3lBVnFCZGQ4Tk04RzhZQXdKSHdrajBIZ0d3a1REb2Z2cFpxVm92VEI5SkloY3U1dEdIOE13NU96RXFhUFAvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d986ae7-fefc-4f65-9f62-a6ff58b5ef7e", "record_id": "flaws_cloudtrail:0000511:9d986ae7-fefc-4f65-9f62-a6ff58b5ef7e", "row_index": 511, "timestamp": "2018-12-09T03:46:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d986ae7-fefc-4f65-9f62-a6ff58b5ef7e", "eventTime": "2018-12-09T03:46:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSMUw2UVZZMFdBVUhIUkQ4dS9oVkxad3RkeUNuNnNXZ1gvaDk0blhSWWozZWhmSUlEUHd0UTFGWFJNNkhrMkhiQldvKzZEbUpDT0ZKaVUxTVY5MW5UY2xoOVNvcmVOWDEvZTFlSzJ6Rllza2RGU2F2QXVTYmdtdXl3RXRWQmpCNFlOVnpacUtpUFltOEI2c0Nadm1BRHpyUXdDRlpoL3FneVM2YjVQVkl0ekNoRDFBMXBSdGZ3bHF2dFkzRGlMMmorcHhYbThJZFB3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11617c-a60e-423c-ae3a-d28d2b5b25c5", "record_id": "flaws_cloudtrail:0000512:11617c-a60e-423c-ae3a-d28d2b5b25c5", "row_index": 512, "timestamp": "2018-12-09T03:46:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11617c-a60e-423c-ae3a-d28d2b5b25c5", "eventTime": "2018-12-09T03:46:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlbno2K1hvWVd0UGdEWTkyNFpjV0lCWGY3YzdteEkyeHlDTHY1WjAyNHVjWWUzV1ZXYUpsMTNQN2o5aFQ5ZlhiMExQWUttZnJWazVUaXh0RlhURi9hRkxlSjR3UGVTT0RkMkI3N3NXUFVsTWNXQTNVS0xWUzFab2piWWJmclNUZVp4QXJ4cXlKdGRBMXo3czk5Q3lwU2p1Kys2NVRaY254S1VUd3NWYVNTQVZlUFl3cHhuUmQ3VmpCQWRaY1pNME4zTExIYmFnd04vQS8rQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f713146-0eee-41e5-85b1-038359b6b42ac", "record_id": "flaws_cloudtrail:0000513:4f713146-0eee-41e5-85b1-038359b6b42ac", "row_index": 513, "timestamp": "2018-12-09T03:46:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f713146-0eee-41e5-85b1-038359b6b42ac", "eventTime": "2018-12-09T03:46:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYNVNwTnNpbjZOMGx1eFM2OThoS1RBTnhVbjMvUzN6bWN4Mnp3UmVxZzdTOWtBeFl3S01mQTc2V2UySHlKV1g1K3JrVk9ST0w0V1A3Q3M0em4yTjVjSmdmT3Z1WTFtYld2MThoK0NRWk1Lb01UbzY3dGFKaEhjd0l2T3REWUJ2ZGcyR3FFTFpSNTk0TUZqbGRYblR1Z0lmSFRId1o4Z2FUejdGZG9uMkgydmpjWjZNVGgwTTVCVGdtVGZmeWZ3WGU5ekppQjQzY01abk5YQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66410f0-1258-4362-b3bb-214c827b419e", "record_id": "flaws_cloudtrail:0000514:66410f0-1258-4362-b3bb-214c827b419e", "row_index": 514, "timestamp": "2018-12-09T03:46:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66410f0-1258-4362-b3bb-214c827b419e", "eventTime": "2018-12-09T03:46:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrYVF2MFJWYmY5UnR5Z0NPcldpSEFpVGtiTFJGK3IvSzFKWTllWGRWa2tqTmpFRFR6Wk1MdFcyRTRiNjB2b3FZZGIwRmNpL2U3aXV1eURZaEZhTFRmSXN1SXR2ZXUrWlp3cXFWY0FTcGN4azBuaEcxYmZyQ3JIZi9wVHFhT3MrenViQXErQy9lUmtucXN0bGI5TmNBd1RoMFIxOW1xT1ZZRWF0bExqa0FLRCs5UzJHWjBQaitYaXEyMUdUTXFuMmQwb2FyOWVWNGMxYmJFZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f041035-9158-4b30-b504-5a0f2ad3b00d", "record_id": "flaws_cloudtrail:0000515:1f041035-9158-4b30-b504-5a0f2ad3b00d", "row_index": 515, "timestamp": "2018-12-09T03:46:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f041035-9158-4b30-b504-5a0f2ad3b00d", "eventTime": "2018-12-09T03:46:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiczNVcFFJSzY1QjhlS3ZnMy9hNHFuLzhXbnNJQTRrTEwrL1pjWTBPcGhsdlp0RjJXR2hzakNTWkRpZ0xhQmFPanYrR09udG5DeGRHNXNEL0hxMDEzNnBRRks5V0xON1NTT3VwM1loVTQvSWZOVFFhMyt3SnUyMzJXSHhkNjh4cW5XRk1GTTRWclJGYWtGQVREdUpDelJyUHcwZ25zYmhEaGpLTUpnRmRidTF4RkNTajNoS3lNNnVrUFJkcFhVZ2xOQjRXYk0wdU82T1hhUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cc8a172-a7a6-4544-83a0-729de0f766a5", "record_id": "flaws_cloudtrail:0000516:2cc8a172-a7a6-4544-83a0-729de0f766a5", "row_index": 516, "timestamp": "2018-12-09T03:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cc8a172-a7a6-4544-83a0-729de0f766a5", "eventTime": "2018-12-09T03:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxV1B3REY3cGVtSjRiSmF1eHVVU2M4NDN3S1JOWFk3SitxTExzbWRvZXBkcnNTSFdzeEt6QzZLTkpoa00vNExKSTRwR2VSN1g5b2g2MFNieitDaUVXU21YMjhOVVhFc3ExQVpidWhBQ0VxM0FuWHNtYTh4MXRXY2dXYmliVjRkbEdKS3VLNVk2aTNFMmxESVRHRXAySXFKRm9iYkZIaVJvelhza0VGOUhEMTBjVkJweENWOTJsemRnanRBWmo5eEpMWEZHM3hXUG5nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4af0b73-2b1f-4b0a-ae2b-32aad45516d5", "record_id": "flaws_cloudtrail:0000517:f4af0b73-2b1f-4b0a-ae2b-32aad45516d5", "row_index": 517, "timestamp": "2018-12-09T03:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4af0b73-2b1f-4b0a-ae2b-32aad45516d5", "eventTime": "2018-12-09T03:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxT2FpTng5MVh0V2trWlpiRjRVTjlZL0pYSnlmYVlzeFQxeDl3ZHdVa0xhRkdCOWhRRm1kWEhnZXRaM1NsWE5wTDk3U1E1N3o4NEg4dWtNdXlZWW44bGo2cmJvNWZSYWRMbkpTNWl3eW5lbnF4QjdnVFpqQTZOcFRLUzlkN2xJbHB0bmxnVzJwcEtweXdsNXF3MTBUS0VqTjRsMXM3cDFzMU1RbGtrVVRjMjNBZFE3cTkrL1Y3eWZFWDlFdFFjUDd1TVI1SVgyamZmZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f81c2ff-b8ff-44fa-991d-6f8eb7131a30", "record_id": "flaws_cloudtrail:0000518:8f81c2ff-b8ff-44fa-991d-6f8eb7131a30", "row_index": 518, "timestamp": "2018-12-09T03:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f81c2ff-b8ff-44fa-991d-6f8eb7131a30", "eventTime": "2018-12-09T03:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwRXJEYWppR0ZIWExENUQ1TUF6czllQzJ6L09KVGYvQXZaUFNWdGNEaHFIM1NqNS9yTkg1eU1lTWJhTUVhN295cjZGU1V5bmdVVVJqem5jbHA2UWRaNTJNdEdzUE9pUnhOR0hMVmJSZ0ZUVE9NSTFHcFlYejY5bzdzaGpNR2JpbklubUJaOTZEQTl4V3FDZ3RqSWpZODNoYlVCUzdXcU0wSFRveElrM2lUQ2JRRTRZTERYc0NwNzRZUmtlVFZpL0NadDZjdEpoSHMxTVFiRTk2UlFtM2RJcUNEbmxScS84PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "354a3ea9-af1f-44fb-81cf-182f0e99fbc1", "record_id": "flaws_cloudtrail:0000519:354a3ea9-af1f-44fb-81cf-182f0e99fbc1", "row_index": 519, "timestamp": "2018-12-09T03:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "354a3ea9-af1f-44fb-81cf-182f0e99fbc1", "eventTime": "2018-12-09T03:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOSVd0bFl0aHNSTVNpUEIyZjRlU2o4QnVFQzNPaS93U284aEs0KzNBcGwrWlRoTWt4QzZpRUN3cG5hQndiRytRZUVDZHpFS1IzMUNpc09XcHl5eVhGd0l4dUNPSTUwTHlaMEsrTkU0NWhaRC91a085ZTB4VDg2Vk56c3pGamQvblJXTjN2eGVRZ1pQVXRLa0FSYU5WeUpHaVpPR2tnNjkzd2g1RDhNUEhFMWdTNmxQRHhIdVhvNHRWODZ5OW1HLytTT0o5akJmd3hSRkJJN1JxS0oxU3Y3VlNxWDkyNVRzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a4c1116-6f3c-4e00-b5ab-9b91c0c5711a", "record_id": "flaws_cloudtrail:0000520:0a4c1116-6f3c-4e00-b5ab-9b91c0c5711a", "row_index": 520, "timestamp": "2018-12-09T03:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a4c1116-6f3c-4e00-b5ab-9b91c0c5711a", "eventTime": "2018-12-09T03:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtalAwNWNZY1N3RVY5RWVlU1VvemM3VEpWSHUxSmo3R1I2VHRQbU1wczdwMXBvOUt0STRGUHIzMnl5VEp4bThzdUJtUlJqZU9PQmJ4SlBFTHA3T0hZVVVHejFzSHc2ZVF3eVRlZW9oSnhlMkF2OFpyNy80TisvMzJhQXJ4SkN2OEtHQnlQWldLS0RWWTJTcE14TlBWWHpkaGJ0REhjTC9QYUtIN0IxR0YwSjJhMVlvdGQ4SDRXRXZTSjlWdVorRjNIV3dEMG5iVE1SVGRJUTZhaHlaWFlVZWl4WWRxQ2dNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6ce9b74-7115-46e6-9327-fdfc9cec6c71", "record_id": "flaws_cloudtrail:0000521:e6ce9b74-7115-46e6-9327-fdfc9cec6c71", "row_index": 521, "timestamp": "2018-12-09T03:46:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6ce9b74-7115-46e6-9327-fdfc9cec6c71", "eventTime": "2018-12-09T03:46:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWenlJRkdBMndlU29KNUxuQllJNTczWnFqVSs1WEs4cHR2VmxpYmVVMFRHeURndHRXK1dDMjVleWNhZU5GcmhlQlp4TjhseEFLbG1zanp2TWJWR0lkOTRrdCtFcjZ4cDlzVE82RjY5Rmk1bFB0a2NmVmpEeEJsQzMxTlR5WFFQbWRPMExjV1FNeUc0VndGWTd1RWl4YllwT1RVTUlwcko2bzRVVytIYUZ0K3ZneUMzK0k2S0pTTmYyVGlLODJBV2F0RUdXUGoxSWh2M01hSWFYZGRwQU02VkFFdmhsNkxrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6feec198-ee10-4895-8b08-6ebb9f3d92d4", "record_id": "flaws_cloudtrail:0000522:6feec198-ee10-4895-8b08-6ebb9f3d92d4", "row_index": 522, "timestamp": "2018-12-09T03:46:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6feec198-ee10-4895-8b08-6ebb9f3d92d4", "eventTime": "2018-12-09T03:46:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuWlpBSWwyZksvYzJGeG9hYU5XSTBNSnZVSVdrZUdQdExYVlFSbHlzdFN6bldzQit3UFh0MC8yL2pBZFgydVRadThZaW1LR3VhZitBNEdSTCtBRVcvTTJ5ejZSdXZRMzgrcnFTRG9DVHBnR2hpUFBWMjY2MVMwZHpOZW9GYW1Vbm51UGJvRndxMDlNbnBxcUg3YW5pZlhqN3pFcFgzMHZETVRDME45bGRRRmc0NDUyZWpZUW5Ga3FBN29zdlk4cG41TVUzUU4xWVZKL2xzOGczRUlGOFc5QTlmcnNyb2lFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f08ab453-ac31-48e1-b3fe-918a175334f1", "record_id": "flaws_cloudtrail:0000523:f08ab453-ac31-48e1-b3fe-918a175334f1", "row_index": 523, "timestamp": "2018-12-09T03:48:18Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f08ab453-ac31-48e1-b3fe-918a175334f1", "eventTime": "2018-12-09T03:48:18Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb6d611-ef23-4a8e-84ce-29462c7c7143", "record_id": "flaws_cloudtrail:0000524:eeb6d611-ef23-4a8e-84ce-29462c7c7143", "row_index": 524, "timestamp": "2018-12-09T03:49:33Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb6d611-ef23-4a8e-84ce-29462c7c7143", "eventTime": "2018-12-09T03:49:33Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91a461e-55b6-4099-8968-f9dfbf0f3291", "record_id": "flaws_cloudtrail:0000525:b91a461e-55b6-4099-8968-f9dfbf0f3291", "row_index": 525, "timestamp": "2018-12-09T03:49:33Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91a461e-55b6-4099-8968-f9dfbf0f3291", "eventTime": "2018-12-09T03:49:33Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "807dac04-1d7b-4269-a178-371d5a252e8b", "record_id": "flaws_cloudtrail:0000526:807dac04-1d7b-4269-a178-371d5a252e8b", "row_index": 526, "timestamp": "2018-12-09T03:49:33Z", "event_type": "DeleteAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "807dac04-1d7b-4269-a178-371d5a252e8b", "eventTime": "2018-12-09T03:49:33Z", "eventName": "DeleteAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:DeleteAccountPasswordPolicy on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fef33a76-79ad-47fb-bb7a-03c58bb7a40f", "record_id": "flaws_cloudtrail:0000527:fef33a76-79ad-47fb-bb7a-03c58bb7a40f", "row_index": 527, "timestamp": "2018-12-09T03:49:33Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fef33a76-79ad-47fb-bb7a-03c58bb7a40f", "eventTime": "2018-12-09T03:49:33Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14b707b2-6d8c-4c6d-ac9a-fd7cc86d9902", "record_id": "flaws_cloudtrail:0000528:14b707b2-6d8c-4c6d-ac9a-fd7cc86d9902", "row_index": 528, "timestamp": "2018-12-09T03:49:33Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1163, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14b707b2-6d8c-4c6d-ac9a-fd7cc86d9902", "eventTime": "2018-12-09T03:49:33Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d231290-0496-4075-a82c-b18c5aba0ade", "record_id": "flaws_cloudtrail:0000529:8d231290-0496-4075-a82c-b18c5aba0ade", "row_index": 529, "timestamp": "2018-12-09T03:49:33Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d231290-0496-4075-a82c-b18c5aba0ade", "eventTime": "2018-12-09T03:49:33Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c2847eb-f80c-48ef-ac3b-9c4923623740", "record_id": "flaws_cloudtrail:0000530:4c2847eb-f80c-48ef-ac3b-9c4923623740", "row_index": 530, "timestamp": "2018-12-09T03:49:33Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1158, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c2847eb-f80c-48ef-ac3b-9c4923623740", "eventTime": "2018-12-09T03:49:33Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListAccessKeys on resource: user nulli-e136005437d6db06c", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "238d6d9b-1e34-4400-86b9-075dcc77e436", "record_id": "flaws_cloudtrail:0000531:238d6d9b-1e34-4400-86b9-075dcc77e436", "row_index": 531, "timestamp": "2018-12-09T03:49:33Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "238d6d9b-1e34-4400-86b9-075dcc77e436", "eventTime": "2018-12-09T03:49:33Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:CreateAccessKey on resource: user nulli-e136005437d6db06c", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f55faa99-4253-40ec-8436-0877c2c8f9d0", "record_id": "flaws_cloudtrail:0000532:f55faa99-4253-40ec-8436-0877c2c8f9d0", "row_index": 532, "timestamp": "2018-12-09T03:49:33Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f55faa99-4253-40ec-8436-0877c2c8f9d0", "eventTime": "2018-12-09T03:49:33Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf9e5472-b347-4400-9857-3ed6a6aee1cd", "record_id": "flaws_cloudtrail:0000533:cf9e5472-b347-4400-9857-3ed6a6aee1cd", "row_index": 533, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf9e5472-b347-4400-9857-3ed6a6aee1cd", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListSAMLProviders on resource: arn:aws:iam::811596193553:saml-provider/*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "860034ec-ba36-452e-be94-0848fab755d5", "record_id": "flaws_cloudtrail:0000534:860034ec-ba36-452e-be94-0848fab755d5", "row_index": 534, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "860034ec-ba36-452e-be94-0848fab755d5", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListAccountAliases on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36095caa-823a-4427-904d-aff6beac81ed", "record_id": "flaws_cloudtrail:0000535:36095caa-823a-4427-904d-aff6beac81ed", "row_index": 535, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1191, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36095caa-823a-4427-904d-aff6beac81ed", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListServerCertificates on resource: arn:aws:iam::811596193553:server-certificate/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2db3778-5c6a-4ab6-aebc-7717e06c0f4d", "record_id": "flaws_cloudtrail:0000536:d2db3778-5c6a-4ab6-aebc-7717e06c0f4d", "row_index": 536, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2db3778-5c6a-4ab6-aebc-7717e06c0f4d", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d6d2198-8ef8-45b9-8e91-c98fafe34ff9", "record_id": "flaws_cloudtrail:0000537:1d6d2198-8ef8-45b9-8e91-c98fafe34ff9", "row_index": 537, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d6d2198-8ef8-45b9-8e91-c98fafe34ff9", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListInstanceProfiles on resource: arn:aws:iam::811596193553:instance-profile/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec174aa1-40c9-4f25-b35f-e8228f61433b", "record_id": "flaws_cloudtrail:0000538:ec174aa1-40c9-4f25-b35f-e8228f61433b", "row_index": 538, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1138, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec174aa1-40c9-4f25-b35f-e8228f61433b", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c7fdc72-aac4-41b4-a4fb-63984ffa7f50", "record_id": "flaws_cloudtrail:0000539:2c7fdc72-aac4-41b4-a4fb-63984ffa7f50", "row_index": 539, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1130, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c7fdc72-aac4-41b4-a4fb-63984ffa7f50", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListMFADevices on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94386-d52e-4f1b-b0ac-446f0a222567", "record_id": "flaws_cloudtrail:0000540:e94386-d52e-4f1b-b0ac-446f0a222567", "row_index": 540, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94386-d52e-4f1b-b0ac-446f0a222567", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a74b3e0-0988-4c7b-b5c9-cea3e82bf308", "record_id": "flaws_cloudtrail:0000541:3a74b3e0-0988-4c7b-b5c9-cea3e82bf308", "row_index": 541, "timestamp": "2018-12-09T03:49:34Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a74b3e0-0988-4c7b-b5c9-cea3e82bf308", "eventTime": "2018-12-09T03:49:34Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListOpenIDConnectProviders on resource: arn:aws:iam::811596193553:oidc-provider/*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61792f-8ecf-4fca-8c4b-11cf73901f6f", "record_id": "flaws_cloudtrail:0000542:61792f-8ecf-4fca-8c4b-11cf73901f6f", "row_index": 542, "timestamp": "2018-12-09T03:49:35Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61792f-8ecf-4fca-8c4b-11cf73901f6f", "eventTime": "2018-12-09T03:49:35Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListSigningCertificates on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a34c5daa-9ae1-4233-a72a-ad48f604b46e", "record_id": "flaws_cloudtrail:0000543:a34c5daa-9ae1-4233-a72a-ad48f604b46e", "row_index": 543, "timestamp": "2018-12-09T03:49:35Z", "event_type": "UpdateAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a34c5daa-9ae1-4233-a72a-ad48f604b46e", "eventTime": "2018-12-09T03:49:35Z", "eventName": "UpdateAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:UpdateAccountPasswordPolicy on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46f50116-dcdb-4dd9-b030-26bbfe2c352b", "record_id": "flaws_cloudtrail:0000544:46f50116-dcdb-4dd9-b030-26bbfe2c352b", "row_index": 544, "timestamp": "2018-12-09T03:49:35Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46f50116-dcdb-4dd9-b030-26bbfe2c352b", "eventTime": "2018-12-09T03:49:35Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f6e1a6a-385f-4d73-9e28-20df9dc12de1", "record_id": "flaws_cloudtrail:0000545:0f6e1a6a-385f-4d73-9e28-20df9dc12de1", "row_index": 545, "timestamp": "2018-12-09T03:49:35Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f6e1a6a-385f-4d73-9e28-20df9dc12de1", "eventTime": "2018-12-09T03:49:35Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListVirtualMFADevices on resource: arn:aws:iam::811596193553:mfa/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e85726-6c94-462a-a3ac-df7a45c2535f", "record_id": "flaws_cloudtrail:0000546:e85726-6c94-462a-a3ac-df7a45c2535f", "row_index": 546, "timestamp": "2018-12-09T03:49:46Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1135, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e85726-6c94-462a-a3ac-df7a45c2535f", "eventTime": "2018-12-09T03:49:46Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad136846d-54ca-4927-add2-d05b0a89c057", "record_id": "flaws_cloudtrail:0000547:ad136846d-54ca-4927-add2-d05b0a89c057", "row_index": 547, "timestamp": "2018-12-09T03:49:46Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1165, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad136846d-54ca-4927-add2-d05b0a89c057", "eventTime": "2018-12-09T03:49:46Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c1826c-add8-4b20-8021-782f24b8376e", "record_id": "flaws_cloudtrail:0000548:97c1826c-add8-4b20-8021-782f24b8376e", "row_index": 548, "timestamp": "2018-12-09T03:49:46Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c1826c-add8-4b20-8021-782f24b8376e", "eventTime": "2018-12-09T03:49:46Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:CreateAccessKey on resource: user nulli-e136005437d6db06c", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a37ef6c3-0a56-4314-9d70-bf5fb7ca961b", "record_id": "flaws_cloudtrail:0000549:a37ef6c3-0a56-4314-9d70-bf5fb7ca961b", "row_index": 549, "timestamp": "2018-12-09T03:49:46Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1141, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a37ef6c3-0a56-4314-9d70-bf5fb7ca961b", "eventTime": "2018-12-09T03:49:46Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720387c41-5935-44de-b977-16e0f41bcbe6", "record_id": "flaws_cloudtrail:0000550:720387c41-5935-44de-b977-16e0f41bcbe6", "row_index": 550, "timestamp": "2018-12-09T03:49:46Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1153, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720387c41-5935-44de-b977-16e0f41bcbe6", "eventTime": "2018-12-09T03:49:46Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002c24c3-9df8-44a7-b08e-a969e3bc0d66", "record_id": "flaws_cloudtrail:0000551:002c24c3-9df8-44a7-b08e-a969e3bc0d66", "row_index": 551, "timestamp": "2018-12-09T03:49:46Z", "event_type": "DeleteAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002c24c3-9df8-44a7-b08e-a969e3bc0d66", "eventTime": "2018-12-09T03:49:46Z", "eventName": "DeleteAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:DeleteAccountPasswordPolicy on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71a523f2-38c5-49cf-98bd-6e8d1512c6f3", "record_id": "flaws_cloudtrail:0000552:71a523f2-38c5-49cf-98bd-6e8d1512c6f3", "row_index": 552, "timestamp": "2018-12-09T03:49:46Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71a523f2-38c5-49cf-98bd-6e8d1512c6f3", "eventTime": "2018-12-09T03:49:46Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549b69a6-bec0-4f84-a3cc-693ba6b0519c", "record_id": "flaws_cloudtrail:0000553:549b69a6-bec0-4f84-a3cc-693ba6b0519c", "row_index": 553, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1158, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549b69a6-bec0-4f84-a3cc-693ba6b0519c", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListAccessKeys on resource: user nulli-e136005437d6db06c", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcbf61fd-88cd-474b-9cd3-93b231bea268", "record_id": "flaws_cloudtrail:0000554:fcbf61fd-88cd-474b-9cd3-93b231bea268", "row_index": 554, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcbf61fd-88cd-474b-9cd3-93b231bea268", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListAccountAliases on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e616d6-6db9-4e4d-bdc4-ddc22f62b907", "record_id": "flaws_cloudtrail:0000555:75e616d6-6db9-4e4d-bdc4-ddc22f62b907", "row_index": 555, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1154, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e616d6-6db9-4e4d-bdc4-ddc22f62b907", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb8b817b-f8a0-4386-befe-54bbace7db27", "record_id": "flaws_cloudtrail:0000556:cb8b817b-f8a0-4386-befe-54bbace7db27", "row_index": 556, "timestamp": "2018-12-09T03:49:47Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb8b817b-f8a0-4386-befe-54bbace7db27", "eventTime": "2018-12-09T03:49:47Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32b2a3ba-3016-4b17-ac60-c28eee4d905c", "record_id": "flaws_cloudtrail:0000557:32b2a3ba-3016-4b17-ac60-c28eee4d905c", "row_index": 557, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1129, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32b2a3ba-3016-4b17-ac60-c28eee4d905c", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListMFADevices on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc259fa-00ca-44a3-999e-7cc1f18ae3ac", "record_id": "flaws_cloudtrail:0000558:cdc259fa-00ca-44a3-999e-7cc1f18ae3ac", "row_index": 558, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1185, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc259fa-00ca-44a3-999e-7cc1f18ae3ac", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListInstanceProfiles on resource: arn:aws:iam::811596193553:instance-profile/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e39adffa-59d5-4281-9404-bc09262db444", "record_id": "flaws_cloudtrail:0000559:e39adffa-59d5-4281-9404-bc09262db444", "row_index": 559, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListOpenIDConnectProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e39adffa-59d5-4281-9404-bc09262db444", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListOpenIDConnectProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListOpenIDConnectProviders on resource: arn:aws:iam::811596193553:oidc-provider/*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b669e6-9129-43c9-950f-081b0e9bc58a", "record_id": "flaws_cloudtrail:0000560:f5b669e6-9129-43c9-950f-081b0e9bc58a", "row_index": 560, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b669e6-9129-43c9-950f-081b0e9bc58a", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListSAMLProviders on resource: arn:aws:iam::811596193553:saml-provider/*", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b01d07-79bd-4a4e-84db-57ce14838057", "record_id": "flaws_cloudtrail:0000561:07b01d07-79bd-4a4e-84db-57ce14838057", "row_index": 561, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b01d07-79bd-4a4e-84db-57ce14838057", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359c6798-84d9-43a1-9e69-6528b45324a0", "record_id": "flaws_cloudtrail:0000562:359c6798-84d9-43a1-9e69-6528b45324a0", "row_index": 562, "timestamp": "2018-12-09T03:49:47Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359c6798-84d9-43a1-9e69-6528b45324a0", "eventTime": "2018-12-09T03:49:47Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd820f73-f64b-400e-98ab-87fe32ac4aca", "record_id": "flaws_cloudtrail:0000563:cd820f73-f64b-400e-98ab-87fe32ac4aca", "row_index": 563, "timestamp": "2018-12-09T03:49:48Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd820f73-f64b-400e-98ab-87fe32ac4aca", "eventTime": "2018-12-09T03:49:48Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListVirtualMFADevices on resource: arn:aws:iam::811596193553:mfa/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f0cab59-d508-478a-a360-ac944b41dc1d", "record_id": "flaws_cloudtrail:0000564:8f0cab59-d508-478a-a360-ac944b41dc1d", "row_index": 564, "timestamp": "2018-12-09T03:49:48Z", "event_type": "UpdateAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1157, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f0cab59-d508-478a-a360-ac944b41dc1d", "eventTime": "2018-12-09T03:49:48Z", "eventName": "UpdateAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:UpdateAccountPasswordPolicy on resource: *", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3ab32e4-c4ef-4360-af05-f265704afc31a", "record_id": "flaws_cloudtrail:0000565:a3ab32e4-c4ef-4360-af05-f265704afc31a", "row_index": 565, "timestamp": "2018-12-09T03:49:48Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3ab32e4-c4ef-4360-af05-f265704afc31a", "eventTime": "2018-12-09T03:49:48Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListSigningCertificates on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605773f-e08c-46db-ab86-c9a787dbdf46", "record_id": "flaws_cloudtrail:0000566:605773f-e08c-46db-ab86-c9a787dbdf46", "row_index": 566, "timestamp": "2018-12-09T03:49:48Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605773f-e08c-46db-ab86-c9a787dbdf46", "eventTime": "2018-12-09T03:49:48Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12a20102-9ba8-4c89-a40a-6a5d32e321e0", "record_id": "flaws_cloudtrail:0000567:12a20102-9ba8-4c89-a40a-6a5d32e321e0", "row_index": 567, "timestamp": "2018-12-09T03:49:48Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1191, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12a20102-9ba8-4c89-a40a-6a5d32e321e0", "eventTime": "2018-12-09T03:49:48Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListServerCertificates on resource: arn:aws:iam::811596193553:server-certificate/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e25b364-7df1-4fca-9a34-fac78ce66f06", "record_id": "flaws_cloudtrail:0000568:2e25b364-7df1-4fca-9a34-fac78ce66f06", "row_index": 568, "timestamp": "2018-12-09T03:50:07Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e25b364-7df1-4fca-9a34-fac78ce66f06", "eventTime": "2018-12-09T03:50:07Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1025b68-156d-4757-95ed-07db813626e7", "record_id": "flaws_cloudtrail:0000569:f1025b68-156d-4757-95ed-07db813626e7", "row_index": 569, "timestamp": "2018-12-09T03:50:15Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1025b68-156d-4757-95ed-07db813626e7", "eventTime": "2018-12-09T03:50:15Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab079925-eeb6-44fa-8fec-b3aff3b68754", "record_id": "flaws_cloudtrail:0000570:ab079925-eeb6-44fa-8fec-b3aff3b68754", "row_index": 570, "timestamp": "2018-12-09T03:52:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "[Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab079925-eeb6-44fa-8fec-b3aff3b68754", "eventTime": "2018-12-09T03:52:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "[Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7f637705-8530-4a24-b394-f98428b7a2d", "record_id": "flaws_cloudtrail:0000571:c7f637705-8530-4a24-b394-f98428b7a2d", "row_index": 571, "timestamp": "2018-12-09T03:53:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7f637705-8530-4a24-b394-f98428b7a2d", "eventTime": "2018-12-09T03:53:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "050ee076-0e8a-4a4c-98df-d26614827992", "record_id": "flaws_cloudtrail:0000572:050ee076-0e8a-4a4c-98df-d26614827992", "row_index": 572, "timestamp": "2018-12-09T03:53:44Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1140, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "050ee076-0e8a-4a4c-98df-d26614827992", "eventTime": "2018-12-09T03:53:44Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "840a0e5a-4e49-4746-9534-29db2d2fc643", "record_id": "flaws_cloudtrail:0000573:840a0e5a-4e49-4746-9534-29db2d2fc643", "row_index": 573, "timestamp": "2018-12-09T03:54:47Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1167, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "840a0e5a-4e49-4746-9534-29db2d2fc643", "eventTime": "2018-12-09T03:54:47Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListAttachedUserPolicies on resource: role 811596193553", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c12b12f3-e2d4-4356-b7b9-cfb0e13f7f7d", "record_id": "flaws_cloudtrail:0000574:c12b12f3-e2d4-4356-b7b9-cfb0e13f7f7d", "row_index": 574, "timestamp": "2018-12-09T03:55:02Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c12b12f3-e2d4-4356-b7b9-cfb0e13f7f7d", "eventTime": "2018-12-09T03:55:02Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListAttachedUserPolicies on resource: role i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d191259d1-494c-4b45-a6c1-60445b7c4", "record_id": "flaws_cloudtrail:0000575:d191259d1-494c-4b45-a6c1-60445b7c4", "row_index": 575, "timestamp": "2018-12-09T03:55:27Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d191259d1-494c-4b45-a6c1-60445b7c4", "eventTime": "2018-12-09T03:55:27Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50a25f43-2dd9-4665-b605-01375d6", "record_id": "flaws_cloudtrail:0000576:50a25f43-2dd9-4665-b605-01375d6", "row_index": 576, "timestamp": "2018-12-09T03:56:11Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAN0E14RGQLAFQXX95", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1135, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50a25f43-2dd9-4665-b605-01375d6", "eventTime": "2018-12-09T03:56:11Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAN0E14RGQLAFQXX95", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-12-09T03:12:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03e10dde-ac71-4dc8-b81c-d62da03ce273", "record_id": "flaws_cloudtrail:0000577:03e10dde-ac71-4dc8-b81c-d62da03ce273", "row_index": 577, "timestamp": "2018-12-09T03:56:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03e10dde-ac71-4dc8-b81c-d62da03ce273", "eventTime": "2018-12-09T03:56:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "ip-address", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a2c6498-3991-426c-8912-41823aa42972", "record_id": "flaws_cloudtrail:0000578:7a2c6498-3991-426c-8912-41823aa42972", "row_index": 578, "timestamp": "2018-12-09T03:57:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a2c6498-3991-426c-8912-41823aa42972", "eventTime": "2018-12-09T03:57:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84f4fc54-6a72-4eb6-a936-c3085a6d97f6", "record_id": "flaws_cloudtrail:0000579:84f4fc54-6a72-4eb6-a936-c3085a6d97f6", "row_index": 579, "timestamp": "2018-12-09T03:57:08Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.5.45.253", "user_agent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84f4fc54-6a72-4eb6-a936-c3085a6d97f6", "eventTime": "2018-12-09T03:57:08Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.5.45.253", "userAgent": "Boto3/1.9.62 Python/3.6.5 Darwin/18.0.0 Botocore/1.12.62", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6234a7f2-7d5b-4edf-aad9-903c9879dfd2", "record_id": "flaws_cloudtrail:0000580:6234a7f2-7d5b-4edf-aad9-903c9879dfd2", "row_index": 580, "timestamp": "2018-12-09T04:05:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6234a7f2-7d5b-4edf-aad9-903c9879dfd2", "eventTime": "2018-12-09T04:05:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c767471e9-e816-4adb-832d-0d922b807154", "record_id": "flaws_cloudtrail:0000581:c767471e9-e816-4adb-832d-0d922b807154", "row_index": 581, "timestamp": "2018-12-09T04:05:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c767471e9-e816-4adb-832d-0d922b807154", "eventTime": "2018-12-09T04:05:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLV3V5TU5uOFFZMGMxYWFTRHNNSWFxNlUraGVUcGhSeUhnK1VGNytUSExSZEp2VDZFMW8wbmFhMTQ4OE1MeU5JZlNoRTYxc1NPU0N6VjhJSW1UM3gxN1VVMFVqT3ZUc3M3ZkdBaGNLLzFJNExxbHNzOHJSM0VTSTRzVmJEdHhXZnU2YS9YTFF5MDNCTjRwMi90cG1SVDNhckRpVkR1RlFDZCt3a2ZMOVdKNmhDT0pxSTBubm9UMEQvZlJaUEoxRzQwUDd5d0Z4cjh5cXRCZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfd5526-f226-405b-b884-3ea32b12227f", "record_id": "flaws_cloudtrail:0000582:7bfd5526-f226-405b-b884-3ea32b12227f", "row_index": 582, "timestamp": "2018-12-09T04:05:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfd5526-f226-405b-b884-3ea32b12227f", "eventTime": "2018-12-09T04:05:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5WXl4aU1WY2NxU1B5dHE1YXdUQjhaenJ3N3RWYVNkVnFxYVBYOWQzR3FBSHNxVWxoRkNjVWFLSzJQKzJmN0hQMVRST29DVWdTVjVEUlFrSGlOUkpTZTdwTjZPUmEyQURHZVhvdHRoa2pKZzMrK2ZYYlZrRE4xUmNiYmlhYjNBT0hCU1JvY1pYWkVmaXNkeU5QeDV4SjBHTFRuRDZldnB1Zk9LRkhYU2FKSXRvUFBYejZ4eDB0Y21STjdrK0lTT2VSazZNbjFadFVRTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67032f5a-3882-44fe-8fe7-eeda1b3c87c9", "record_id": "flaws_cloudtrail:0000583:67032f5a-3882-44fe-8fe7-eeda1b3c87c9", "row_index": 583, "timestamp": "2018-12-09T04:05:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67032f5a-3882-44fe-8fe7-eeda1b3c87c9", "eventTime": "2018-12-09T04:05:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2M21IaDVoT09zbFdCOWF3Z2tKWnVWNlVCKzRhOHhhOVZ5aG9FUVVpOXh5TW8rYUhUeHl6dzNja3FkQzRaTEhsb0dHMDE1SDBvb01JSWYxR0ZkaGVXOGtlSGNlcFd3b09YcGZuWUxRZXhYMHY1M3RsSjMyQ1hpVHZvWHpIUEJhWWZSL2xiS0l5ZkNMZ1hpZkhPNGg3U0ordnhna29pV0s3c0RBbkU5d0RDamdMUU5rb3lZUUp4YnpVUW9jcTYzaGpwQmptQ1RIcXpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e831966a-45a3-49ff-8cbf-95698bf53d98", "record_id": "flaws_cloudtrail:0000584:e831966a-45a3-49ff-8cbf-95698bf53d98", "row_index": 584, "timestamp": "2018-12-09T04:05:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e831966a-45a3-49ff-8cbf-95698bf53d98", "eventTime": "2018-12-09T04:05:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEU0t1bWh1NVcyNGk2N3gxOElWczJ0eUVpVnZRaEtGYU0rM0R2N3RML2gwTnF5RzF5TFJZOUs0M2llUDRiODZ4ZW1nS2dxSTdVaXF6UXViWCtSdjduMjF5WUhnRitoc2N5aDlCZ013SEM5aWNENkJITVl1RFZZWUMxUGdPeFF3STduTGNmQjd1N1M1cWFwOTlxZlRKQXhYUWZ0N013em1GSEg0Z2laZ3N1cWovYjB4QVgrYVB4SzNUbFI1NWZ6c2taVVAzb3JEcXB0OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78058f26-1b60-4d2c-9f8f-80116037594e", "record_id": "flaws_cloudtrail:0000585:78058f26-1b60-4d2c-9f8f-80116037594e", "row_index": 585, "timestamp": "2018-12-09T04:05:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78058f26-1b60-4d2c-9f8f-80116037594e", "eventTime": "2018-12-09T04:05:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNazErUWpESUUzYnJBT2d5UEd6K0lIbWRBVTNCeW9ZSGJ6ZXpYb1lid0xPcnBGTGxRTkFtZVVDcWdBYUFnV1dBeVppMWFjZWtHRzhLRnl5b3U2VDJ6MktmMktMcjdiL1k0aUNQUnBFMmR0WFhSeFk5TFNVT1RwbzNybHhNcTk0eW1CTGd0NXhRZEQxWSsyaVdiVjdTRXNzQjRORmtDcElqblVNM3JaVSthWTcwQ2ltM1BoOTFzV2lURTNLYU4vcHdFYlNaQ0xvVWVWTzZvZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9db33da9-e3a7-48ca-b191-ae081b932cb1", "record_id": "flaws_cloudtrail:0000586:9db33da9-e3a7-48ca-b191-ae081b932cb1", "row_index": 586, "timestamp": "2018-12-09T04:05:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9db33da9-e3a7-48ca-b191-ae081b932cb1", "eventTime": "2018-12-09T04:05:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLQWFFWjU3c1E2bzRjOWpPYVdUQmxEeDBiVmZQcVlQSHlPS3ZvL2hGbG1qSGhVdlJ0ZlR3M1M1dklWSHg5c1VjMVZaT2hGeWlzWGZ4U0xia2ZTUWNtQmpLb1ByZEtnVW1CcU43N0JmUUJsbVl5aWVQUDlmTXhCUVBRT3k2cEFoTWxDQWswR1BRdWoraFB3cVQ0LzhJSldOeGdFMmxiZk43Z3hZZ0RuNVIrTkY5KzF0ekFsNG9CZTVRVTJRdWg3UEtMVjNCdktUYW05SUFTdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48d2bc05-d387-4e7a-9c62-dcfc659322fb6", "record_id": "flaws_cloudtrail:0000587:48d2bc05-d387-4e7a-9c62-dcfc659322fb6", "row_index": 587, "timestamp": "2018-12-09T04:05:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48d2bc05-d387-4e7a-9c62-dcfc659322fb6", "eventTime": "2018-12-09T04:05:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2bW1ieTZKbUcrclBCbWNTTGFuTmI5eDJqeDR1S1hSR1pCeHRJMTJ2ek9mZXdlOFRsNCtiVTl6K2EzdGJxM2RDcCtOMnpxNHlxUTFUVnVIVGVxY0ZJUE9qdDZNM2ZhcldTWFpLUGc5dVpoM1RwWmNPcTFpUVdEdVhTU0VLb1VwMGdqNVRMYXJrQXdRTWN4NTVUS3JJSnhCVHFyMjNGWlJEcmFBaDN6Nk9mZWVRajFWOXIvaUcreEJuTmxNVlBEcVFOUUcrVTVlSlZPRS84dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "503667f-b011-4d1e-80c0-adf79c50278a", "record_id": "flaws_cloudtrail:0000588:503667f-b011-4d1e-80c0-adf79c50278a", "row_index": 588, "timestamp": "2018-12-09T04:05:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "503667f-b011-4d1e-80c0-adf79c50278a", "eventTime": "2018-12-09T04:05:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFOGczUzNwMktHWi9Eamw1ZjQwV0YwbHBjN2gyeFlDTnIzUlB6MXNEV05DTC9jWDZtbDRIb0ROYnFacW1kdDhhb090d0pxUHpCSnNqdWlXRklnQWR4cmV6QVBudGdiUSs3M3FyNXkxNHdPVDBHeG9iQ0tJa096SjcwbUU0cWhwTlBXQ1oxNE84bmtwWURtWDZ0cXFnVStHTkVUQ2RFZ2FQU1RCZ09nL2JCVGovSmpLZ0FlUVp3KzhiWU85cE1xSDh0L0xiSnVpcXBRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb94eab4-afa5-46e6-84b3-44163e844747", "record_id": "flaws_cloudtrail:0000589:eb94eab4-afa5-46e6-84b3-44163e844747", "row_index": 589, "timestamp": "2018-12-09T04:05:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb94eab4-afa5-46e6-84b3-44163e844747", "eventTime": "2018-12-09T04:05:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqbmZwQytUS0ZjbldKeTJpS05ERkxYUm9BelNOVE8zeENJa3pGVTFDckJTZnAyc1VBQXI5d1RoSVQ4L0llY1N6UzRwVnlzYmd5T1o5NmRva1dwTm1qN0YxaFdpbFh5enBMNXRKVVJPY2tnTlpaSWFUcW8xTGlGNkZqaHlBWmVERXBvK2o4anBXZDhzTm9yRFlGSUhGanh6QXdPYVB4UWRray8ybWMrL0V3SkREbHZjaGVvT3RZOG9BNmNmL0dVeW9CeVk0RjNOUEs3QUsxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32b75c58-a20d-435b-b011-c0c6ac5b7743", "record_id": "flaws_cloudtrail:0000590:32b75c58-a20d-435b-b011-c0c6ac5b7743", "row_index": 590, "timestamp": "2018-12-09T04:05:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32b75c58-a20d-435b-b011-c0c6ac5b7743", "eventTime": "2018-12-09T04:05:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZVpycFdmbC9CLzJvU01MZkJvSWNYNHpFNEFtb3lzRmI4L3AySlg0ckdoL1ViakkyaUgyRmsyNGNCb0RZQW9kMFQyZDI3VmFHTkN1b2NNTlRvVXFOaFlvNmJxOTZMQ2IwWERWcFRiWCtHMnR2TVVsdkJCKy9FVmkybW5VZmxMOVFNMUJ2NTVYamNKRjBaVFdoZ2U3S1crOStEU0p0WDUvQ2FmR05vK3MzQ05NbG1CNENaVkhsYVBjZmhTVE1UNTkzTkU3Mi9FRDFQeVRSUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93fe9ac5-4624-49cc-a2c5-5ee67a59238", "record_id": "flaws_cloudtrail:0000591:93fe9ac5-4624-49cc-a2c5-5ee67a59238", "row_index": 591, "timestamp": "2018-12-09T04:05:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93fe9ac5-4624-49cc-a2c5-5ee67a59238", "eventTime": "2018-12-09T04:05:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSQVlhOEhpSEc2K2hwM04rVUYxRVdIL3NWVEswcEVic1pXQ3ViVTNxc3VmQWxNN0lKcEpuTVFOM0VrMG5pTXBKejRQMTFpQUhHZU9wNXBPbm8xQW1GUndFUVFLRzU1eUVZYVByRXpwVTMyOHhlbExMUmRxazd3Q0ROSVFQZGNnYnZYdWRzUkYwLytNNW5ycFJvMGkxOEE4RHl1WGpDVmpLdkdIQjI4NENFTk1kTGtrU0dqTWNtUHM0NWRyM3JhNzFwVi94c2RaRnBKb1IwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "616c3030-4225-4b65-88f5-78e073070", "record_id": "flaws_cloudtrail:0000592:616c3030-4225-4b65-88f5-78e073070", "row_index": 592, "timestamp": "2018-12-09T04:05:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "616c3030-4225-4b65-88f5-78e073070", "eventTime": "2018-12-09T04:05:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJURTJCTmcxWUdJOGJQZ3ByQnFPQjVmL3NpdzkyQ2wrTlNLN1NjZkEzYlV3TEQ0ajIwdUx6clMyNW9TTm9CNkRmMFF5aC96ayttc2c5VGRlamV5SXBrN2s2Tnh2Rlp4eERmS2ZmZUpzL0dPaHlPV016alRCWmVXNVVlY2sxVFZtRTY0ZTVHcGs2Z0tPTmdrTExvYUpTc3pubWh5bHVkZytId1ExQnZlVDZmNlNhUmZEeWV5MGtkSFR1QWhrVVpYZ1l2dHZMdkdDTmlYSUdzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c73e45a-8b5f-4a85-b115-511521d81e", "record_id": "flaws_cloudtrail:0000593:7c73e45a-8b5f-4a85-b115-511521d81e", "row_index": 593, "timestamp": "2018-12-09T04:05:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c73e45a-8b5f-4a85-b115-511521d81e", "eventTime": "2018-12-09T04:05:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1QnF0YnhTcGo4WTg0cmxSVTVwOVFBaFhBQ0NQWUFSZnNBeXh4ZTlnK2ZPbng2WDlHNmRGN2JDZHJIZ1E0VStlR0IvUlY2bzZWWGdpWjBiVktRWmJvS09HREJyWHdFdXpuM1NnZDNRMjF6UUdudlpZN0hiRnpsSkZaZit5QTdNaWVpVjVBRlVkcHFuYXVobTR4VmxDYWtZbkRvdGlUMnFWdDVsS0ZmT1luZGkvZUxvaHpGWjJMRWI1dVNKc0tNakJ0NmJycmkrMWR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b18e031f-bd8f-4884-b433-9abf60cfd453", "record_id": "flaws_cloudtrail:0000594:b18e031f-bd8f-4884-b433-9abf60cfd453", "row_index": 594, "timestamp": "2018-12-09T04:05:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b18e031f-bd8f-4884-b433-9abf60cfd453", "eventTime": "2018-12-09T04:05:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrMEoxNnZKQ0szQ2Q2QlVEV2J3dFZpeGxwaGp5UXEveXVTcW9UQXJmYUdBdWNsdTFiSERoTzdhbUdtSnZRWFdJZmFpWUNLWHhCeEdEUFMwaXY1MXI1a1d2MmlNNWd3MDNKRTdUditpU25YSXYxV0NzSC9ZWUthWFRZQTQrWVF2dkxqUWxUSkNYVEhEMi9Db1ZXaUxCVlN3YmFmbDRwU2xpQlpCb0c1Zi9odUp6cUZ1WFBnS2cvSlNiWkpZTjRIdzB5dG1vMWdHNGtzbi9pTk5sb3BIRzhKS21tU3F4c3FZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc853e03-88c7-474f-833d-60db13aee291", "record_id": "flaws_cloudtrail:0000595:cc853e03-88c7-474f-833d-60db13aee291", "row_index": 595, "timestamp": "2018-12-09T04:05:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc853e03-88c7-474f-833d-60db13aee291", "eventTime": "2018-12-09T04:05:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0aWx3QnFGNzhVbFJQaHZQSWJYMkpDZnU5aFFXMGxlRFllSWJMY3pBNDQ0SjNVbDlMM1NBUTNpY0JZN2YrY1hSZ0ZVOGkxSFZIa2xZSm5QczRUZ2R3YjFrcW5uaXcyZitGU3Z5RUZPcnFjSVNTT0dlVzlSYW50QXd3bEx0MWVCWEM0eDFCQXA4bkhZU0N1UmdDdzA0YjlQMDFHRnFQMVVGYzUzWS8zbVpmcHdtaGc5UVk0MWQ4NlR1N0Fkdk1HcTBZczl6YkhaOXIrRnR2M01EQXh5MitSdzlMdnhreU5nPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a869308e9-de30-4c03-9ee8-133c7e937303", "record_id": "flaws_cloudtrail:0000596:a869308e9-de30-4c03-9ee8-133c7e937303", "row_index": 596, "timestamp": "2018-12-09T04:05:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a869308e9-de30-4c03-9ee8-133c7e937303", "eventTime": "2018-12-09T04:05:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjVmR6USs1VS9BMlBZSWJvRTVYWm9yVFdUM3g4L05mS04xL0wvQjVTQjBvdi82dWQ2SmEvcEdOemduT0FWUGlabHpTVWtWUEtiUVRycE9YMXVncTM4dklabXgwT0pDNXp3akRKcks1eDFtS0FrYzlRRVE1NlRLekd6THAyK3c2ZXZPbDNJK3NIQmR6azdNcGRvQ1hkcjBHOTMvcXhpNWhaciszOVo1M3Z0QXdmVW01UnVLMnVKMndPU1pQcDBCdXNtL0k2S2Z1eVhmZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "410d2677-6298-4a2b-8944-7d50254b3842", "record_id": "flaws_cloudtrail:0000597:410d2677-6298-4a2b-8944-7d50254b3842", "row_index": 597, "timestamp": "2018-12-09T04:05:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "410d2677-6298-4a2b-8944-7d50254b3842", "eventTime": "2018-12-09T04:05:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkQWZuanJTaDVDZkZ5dFdYSWc3Mzh6KzRlUFkxcENmQ3NFSldaT01KWDJiMTFtS3BXcFVhV1FEZW5IWDlkbDJ4enY2OVI2Z1h2Y2c0bWZSS1AxOEFkV0ttUEJ0Z2FQT2lpczA0QWhNSTArbVQwOWlibUdRaEJHdFVWVkViMzY0cjBScjJ0WnV2cmQ2ZGVEZWhuSG9QdzZkR01RL1FRU0xscCsvVVVHVGhTdnhXbUV0WjJJdmdBa0lzNW1yczhLdTl6c1hCdldMR0dMaGUwSXEySld3S1BzY0Q2V0lGeXNFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65cd1215-59c1-47f4-89b8-93e9fbec9822", "record_id": "flaws_cloudtrail:0000598:65cd1215-59c1-47f4-89b8-93e9fbec9822", "row_index": 598, "timestamp": "2018-12-09T04:05:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65cd1215-59c1-47f4-89b8-93e9fbec9822", "eventTime": "2018-12-09T04:05:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWGxCZHg4S215em14enR1TnRhTTY4WjhsS042WEZMc0d5bE55MVQ3TnpFWkFHN3h3MnhLbTRFdnlpREZoQ3liUEkyczZMN0piQVBBeXZPS3JyaksrTXpTKys2RmZvb2tCV2xjK2ovUmh3QmZxRkc5ZmRwUGdVSkdlVjZCV2hFY3RvWjk3L3kxYTZ1SnJyQXUvaWJReFRCUGg5U0I0bkI3c3RDNU5hbzVaYXFYTGhWL2N2UStDMmYyc0tFT0Q4TmlIQkZ1MjRveEVqVWJHMks0ZDloOGRuM3dPYVlCY2tzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec00d04f-5e87-48b6-9a00-7e4f0bdc63d6", "record_id": "flaws_cloudtrail:0000599:ec00d04f-5e87-48b6-9a00-7e4f0bdc63d6", "row_index": 599, "timestamp": "2018-12-09T04:05:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec00d04f-5e87-48b6-9a00-7e4f0bdc63d6", "eventTime": "2018-12-09T04:05:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSc0xWbnVtcEcvRTI5dCs4cER0MkJBazJwd1A0ZzJKRG1zZ0tmY0xtYTBxbnZXbW1rVVdUVmE1bzIyUWRCVm8rdFUyK3oyMmhwSU8vMms0azJzYTJYckwyMjF3UXNNT0lmWTQxbFptQzNCOGdxZkwxWTR4VCtIKzVUWEFXeUVUWmZ6bmdzaDIxeGt4ZWhvQmxCdTJSZm1DdENpZXBTS1Njb3NOekdjY0E4T0NTZE5hRDFzWDUxNEtrR1FGcXNlbDUya0FZTEZEUU1mUnIrTHNsTXdKZkMzRlB1bUZSRzZNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76374c9-28ea-4933-b007-6033b61862f", "record_id": "flaws_cloudtrail:0000600:76374c9-28ea-4933-b007-6033b61862f", "row_index": 600, "timestamp": "2018-12-09T04:09:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76374c9-28ea-4933-b007-6033b61862f", "eventTime": "2018-12-09T04:09:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "ip-address", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32fb1364-6797-417a-87bd-3b016af04fe8", "record_id": "flaws_cloudtrail:0000601:32fb1364-6797-417a-87bd-3b016af04fe8", "row_index": 601, "timestamp": "2018-12-09T04:12:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1482, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32fb1364-6797-417a-87bd-3b016af04fe8", "eventTime": "2018-12-09T04:12:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0IH3XTTKVU8LCJRD", "expiration": "Dec 9, 2018 10:48:26 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d7a9b3c-0ebc-4bb0-afbb-c3bf6162690c", "record_id": "flaws_cloudtrail:0000602:3d7a9b3c-0ebc-4bb0-afbb-c3bf6162690c", "row_index": 602, "timestamp": "2018-12-09T04:16:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d7a9b3c-0ebc-4bb0-afbb-c3bf6162690c", "eventTime": "2018-12-09T04:16:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "ip-address", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccc84a40-e076-46a2-a6ef-642208a72495", "record_id": "flaws_cloudtrail:0000603:ccc84a40-e076-46a2-a6ef-642208a72495", "row_index": 603, "timestamp": "2018-12-09T04:17:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccc84a40-e076-46a2-a6ef-642208a72495", "eventTime": "2018-12-09T04:17:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d7f13c8-a36b-44e8-beb9-f97fb0f1486f", "record_id": "flaws_cloudtrail:0000604:4d7f13c8-a36b-44e8-beb9-f97fb0f1486f", "row_index": 604, "timestamp": "2018-12-09T04:17:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d7f13c8-a36b-44e8-beb9-f97fb0f1486f", "eventTime": "2018-12-09T04:17:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDZzFhb1Azd0JVYWdMbzU1cmlFdSsySEMwKzE3eVlDVnhyZ0ZuVEIyTXUzK3dOUFVFYWZYejNOQzFZOEFWaFlDRHNJa3owMFBaeWdPMWU1a0ZtMnpzZUdxOXczeXhzUm44d3lPYUlxZEw4emJyUUR0RTJhbmVKTTdZamFlSjZQZ1A1NGFlS2RDOUpzWlBlT3ZGbktYQXZZd2RQRnhjeTI1Z2g4YWp0K3plVDFtSkFUTGI5dTZUaEJDc1FlaWExU2NHRUd2eUprUlhGTHFiQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "905712e2-f479-4260-a85d-d360eb188894", "record_id": "flaws_cloudtrail:0000605:905712e2-f479-4260-a85d-d360eb188894", "row_index": 605, "timestamp": "2018-12-09T04:17:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.178.255.5", "user_agent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "905712e2-f479-4260-a85d-d360eb188894", "eventTime": "2018-12-09T04:17:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.178.255.5", "userAgent": "aws-cli/1.16.60 Python/3.6.5 Darwin/17.6.0 botocore/1.12.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIycnBZUWt2VFkxMUVGR0JHLzc4em9nTFhVSnVWVHRYOFNlYjI0dnFVUnpRa2tTeHcyRlgwVXljRlFMMTFQaG0waFMwOU85aDViRENXWENCRytXMzVxY2hLdzBjZUliZGdEVE5mWThpQWlDWWtVUTc3bzdpVTQzNEVqZ2tGTm9IRStmUWpDcWNwM0dtSGRHNGxSK2N0WWFZTlMrLzFoV3h0WUFUNGI5K1RGVEJScDBvTWI5SWNWSWt3VkFRME1oNWtrVThVcENPUTJBMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}