Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e738f4a-f083-4831-9b06-b530301b44f37", "record_id": "flaws_cloudtrail:0000000:5e738f4a-f083-4831-9b06-b530301b44f37", "row_index": 0, "timestamp": "2019-08-16T08:50:48Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e738f4a-f083-4831-9b06-b530301b44f37", "eventTime": "2019-08-16T08:50:48Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "513148c1-283a-46a7-90d5-347e0ebedd16", "record_id": "flaws_cloudtrail:0000001:513148c1-283a-46a7-90d5-347e0ebedd16", "row_index": 1, "timestamp": "2019-08-16T08:50:48Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "513148c1-283a-46a7-90d5-347e0ebedd16", "eventTime": "2019-08-16T08:50:48Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23ea3500-3181-41df-ba7a-ae9757f057ca", "record_id": "flaws_cloudtrail:0000002:23ea3500-3181-41df-ba7a-ae9757f057ca", "row_index": 2, "timestamp": "2019-08-16T08:50:48Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23ea3500-3181-41df-ba7a-ae9757f057ca", "eventTime": "2019-08-16T08:50:48Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1173ade6-f8d9-4089-9fb0-a346c235cb93", "record_id": "flaws_cloudtrail:0000003:1173ade6-f8d9-4089-9fb0-a346c235cb93", "row_index": 3, "timestamp": "2019-08-16T08:50:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1173ade6-f8d9-4089-9fb0-a346c235cb93", "eventTime": "2019-08-16T08:50:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1173ade6-f8d9-4089-9fb0-a346c235cb93", "record_id": "flaws_cloudtrail:0000004:1173ade6-f8d9-4089-9fb0-a346c235cb93", "row_index": 4, "timestamp": "2019-08-16T08:50:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1173ade6-f8d9-4089-9fb0-a346c235cb93", "eventTime": "2019-08-16T08:50:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9403f14-6b13-4a31-a4fa-a2f8f212c347", "record_id": "flaws_cloudtrail:0000005:b9403f14-6b13-4a31-a4fa-a2f8f212c347", "row_index": 5, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9403f14-6b13-4a31-a4fa-a2f8f212c347", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc0b4c84-df7a-416d-b6b4-24bfb3acf736", "record_id": "flaws_cloudtrail:0000006:cc0b4c84-df7a-416d-b6b4-24bfb3acf736", "row_index": 6, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc0b4c84-df7a-416d-b6b4-24bfb3acf736", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae385201b-2e29-4ad9-8369-6e821aedf78f", "record_id": "flaws_cloudtrail:0000007:ae385201b-2e29-4ad9-8369-6e821aedf78f", "row_index": 7, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae385201b-2e29-4ad9-8369-6e821aedf78f", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb71791-6bcf-44b8-9d55-87d06107a9f7", "record_id": "flaws_cloudtrail:0000008:bb71791-6bcf-44b8-9d55-87d06107a9f7", "row_index": 8, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb71791-6bcf-44b8-9d55-87d06107a9f7", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eaf953c-4507-4f3d-b85e-fbca33a67fa8", "record_id": "flaws_cloudtrail:0000009:3eaf953c-4507-4f3d-b85e-fbca33a67fa8", "row_index": 9, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eaf953c-4507-4f3d-b85e-fbca33a67fa8", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9403f14-6b13-4a31-a4fa-a2f8f212c347", "record_id": "flaws_cloudtrail:0000010:b9403f14-6b13-4a31-a4fa-a2f8f212c347", "row_index": 10, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9403f14-6b13-4a31-a4fa-a2f8f212c347", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc0b4c84-df7a-416d-b6b4-24bfb3acf736", "record_id": "flaws_cloudtrail:0000011:cc0b4c84-df7a-416d-b6b4-24bfb3acf736", "row_index": 11, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc0b4c84-df7a-416d-b6b4-24bfb3acf736", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae385201b-2e29-4ad9-8369-6e821aedf78f", "record_id": "flaws_cloudtrail:0000012:ae385201b-2e29-4ad9-8369-6e821aedf78f", "row_index": 12, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae385201b-2e29-4ad9-8369-6e821aedf78f", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb71791-6bcf-44b8-9d55-87d06107a9f7", "record_id": "flaws_cloudtrail:0000013:bb71791-6bcf-44b8-9d55-87d06107a9f7", "row_index": 13, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb71791-6bcf-44b8-9d55-87d06107a9f7", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eaf953c-4507-4f3d-b85e-fbca33a67fa8", "record_id": "flaws_cloudtrail:0000014:3eaf953c-4507-4f3d-b85e-fbca33a67fa8", "row_index": 14, "timestamp": "2019-08-16T08:50:51Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eaf953c-4507-4f3d-b85e-fbca33a67fa8", "eventTime": "2019-08-16T08:50:51Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2818c64-eb80-43f2-b25a-291d7db0331b", "record_id": "flaws_cloudtrail:0000015:c2818c64-eb80-43f2-b25a-291d7db0331b", "row_index": 15, "timestamp": "2019-08-16T08:50:52Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2818c64-eb80-43f2-b25a-291d7db0331b", "eventTime": "2019-08-16T08:50:52Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f30c82-689d-4f29-8347-7a149348dc", "record_id": "flaws_cloudtrail:0000016:a5f30c82-689d-4f29-8347-7a149348dc", "row_index": 16, "timestamp": "2019-08-16T08:50:52Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f30c82-689d-4f29-8347-7a149348dc", "eventTime": "2019-08-16T08:50:52Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2818c64-eb80-43f2-b25a-291d7db0331b", "record_id": "flaws_cloudtrail:0000017:c2818c64-eb80-43f2-b25a-291d7db0331b", "row_index": 17, "timestamp": "2019-08-16T08:50:52Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2818c64-eb80-43f2-b25a-291d7db0331b", "eventTime": "2019-08-16T08:50:52Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticmapreduce:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f30c82-689d-4f29-8347-7a149348dc", "record_id": "flaws_cloudtrail:0000018:a5f30c82-689d-4f29-8347-7a149348dc", "row_index": 18, "timestamp": "2019-08-16T08:50:52Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f30c82-689d-4f29-8347-7a149348dc", "eventTime": "2019-08-16T08:50:52Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c638f42-5532-448c-9db0-d171a543248e", "record_id": "flaws_cloudtrail:0000019:1c638f42-5532-448c-9db0-d171a543248e", "row_index": 19, "timestamp": "2019-08-16T08:50:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c638f42-5532-448c-9db0-d171a543248e", "eventTime": "2019-08-16T08:50:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dac5af3-419f-42eb-8c89-18d28ff36b4e", "record_id": "flaws_cloudtrail:0000020:7dac5af3-419f-42eb-8c89-18d28ff36b4e", "row_index": 20, "timestamp": "2019-08-16T08:50:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dac5af3-419f-42eb-8c89-18d28ff36b4e", "eventTime": "2019-08-16T08:50:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38309db6-c68c-42a3-baec-429480a6cc30", "record_id": "flaws_cloudtrail:0000021:38309db6-c68c-42a3-baec-429480a6cc30", "row_index": 21, "timestamp": "2019-08-16T08:50:53Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38309db6-c68c-42a3-baec-429480a6cc30", "eventTime": "2019-08-16T08:50:53Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c638f42-5532-448c-9db0-d171a543248e", "record_id": "flaws_cloudtrail:0000022:1c638f42-5532-448c-9db0-d171a543248e", "row_index": 22, "timestamp": "2019-08-16T08:50:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c638f42-5532-448c-9db0-d171a543248e", "eventTime": "2019-08-16T08:50:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dac5af3-419f-42eb-8c89-18d28ff36b4e", "record_id": "flaws_cloudtrail:0000023:7dac5af3-419f-42eb-8c89-18d28ff36b4e", "row_index": 23, "timestamp": "2019-08-16T08:50:53Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dac5af3-419f-42eb-8c89-18d28ff36b4e", "eventTime": "2019-08-16T08:50:53Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38309db6-c68c-42a3-baec-429480a6cc30", "record_id": "flaws_cloudtrail:0000024:38309db6-c68c-42a3-baec-429480a6cc30", "row_index": 24, "timestamp": "2019-08-16T08:50:53Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38309db6-c68c-42a3-baec-429480a6cc30", "eventTime": "2019-08-16T08:50:53Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b4f27ac-24b9-4172-a7c5-777c4ee49bf9", "record_id": "flaws_cloudtrail:0000025:2b4f27ac-24b9-4172-a7c5-777c4ee49bf9", "row_index": 25, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b4f27ac-24b9-4172-a7c5-777c4ee49bf9", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e8509c-1c7e-405d-9401-e4587e353b1c", "record_id": "flaws_cloudtrail:0000026:f3e8509c-1c7e-405d-9401-e4587e353b1c", "row_index": 26, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e8509c-1c7e-405d-9401-e4587e353b1c", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318cc6f1-5f9c-4fb7-98c3-1bb6ba1d5fd0", "record_id": "flaws_cloudtrail:0000027:318cc6f1-5f9c-4fb7-98c3-1bb6ba1d5fd0", "row_index": 27, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318cc6f1-5f9c-4fb7-98c3-1bb6ba1d5fd0", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab56beb-4d34-4efd-bfe7-d75095fcc96", "record_id": "flaws_cloudtrail:0000028:1ab56beb-4d34-4efd-bfe7-d75095fcc96", "row_index": 28, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab56beb-4d34-4efd-bfe7-d75095fcc96", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b4f27ac-24b9-4172-a7c5-777c4ee49bf9", "record_id": "flaws_cloudtrail:0000029:2b4f27ac-24b9-4172-a7c5-777c4ee49bf9", "row_index": 29, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b4f27ac-24b9-4172-a7c5-777c4ee49bf9", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e8509c-1c7e-405d-9401-e4587e353b1c", "record_id": "flaws_cloudtrail:0000030:f3e8509c-1c7e-405d-9401-e4587e353b1c", "row_index": 30, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e8509c-1c7e-405d-9401-e4587e353b1c", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318cc6f1-5f9c-4fb7-98c3-1bb6ba1d5fd0", "record_id": "flaws_cloudtrail:0000031:318cc6f1-5f9c-4fb7-98c3-1bb6ba1d5fd0", "row_index": 31, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318cc6f1-5f9c-4fb7-98c3-1bb6ba1d5fd0", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab56beb-4d34-4efd-bfe7-d75095fcc96", "record_id": "flaws_cloudtrail:0000032:1ab56beb-4d34-4efd-bfe7-d75095fcc96", "row_index": 32, "timestamp": "2019-08-16T08:50:54Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab56beb-4d34-4efd-bfe7-d75095fcc96", "eventTime": "2019-08-16T08:50:54Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eb50ebf-2194-47e7-a649-85095f77f7e9", "record_id": "flaws_cloudtrail:0000033:8eb50ebf-2194-47e7-a649-85095f77f7e9", "row_index": 33, "timestamp": "2019-08-16T08:50:56Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eb50ebf-2194-47e7-a649-85095f77f7e9", "eventTime": "2019-08-16T08:50:56Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad79a0e4-699d-4be2-ba03-1a7ed0076a2e", "record_id": "flaws_cloudtrail:0000034:ad79a0e4-699d-4be2-ba03-1a7ed0076a2e", "row_index": 34, "timestamp": "2019-08-16T08:50:56Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad79a0e4-699d-4be2-ba03-1a7ed0076a2e", "eventTime": "2019-08-16T08:50:56Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc1bb96a-0472-412b-bf66-09a74b8d7a3b", "record_id": "flaws_cloudtrail:0000035:dc1bb96a-0472-412b-bf66-09a74b8d7a3b", "row_index": 35, "timestamp": "2019-08-16T08:50:56Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc1bb96a-0472-412b-bf66-09a74b8d7a3b", "eventTime": "2019-08-16T08:50:56Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eb50ebf-2194-47e7-a649-85095f77f7e9", "record_id": "flaws_cloudtrail:0000036:8eb50ebf-2194-47e7-a649-85095f77f7e9", "row_index": 36, "timestamp": "2019-08-16T08:50:56Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eb50ebf-2194-47e7-a649-85095f77f7e9", "eventTime": "2019-08-16T08:50:56Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad79a0e4-699d-4be2-ba03-1a7ed0076a2e", "record_id": "flaws_cloudtrail:0000037:ad79a0e4-699d-4be2-ba03-1a7ed0076a2e", "row_index": 37, "timestamp": "2019-08-16T08:50:56Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad79a0e4-699d-4be2-ba03-1a7ed0076a2e", "eventTime": "2019-08-16T08:50:56Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc1bb96a-0472-412b-bf66-09a74b8d7a3b", "record_id": "flaws_cloudtrail:0000038:dc1bb96a-0472-412b-bf66-09a74b8d7a3b", "row_index": 38, "timestamp": "2019-08-16T08:50:56Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc1bb96a-0472-412b-bf66-09a74b8d7a3b", "eventTime": "2019-08-16T08:50:56Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5c0996-ab74-4d73-9ac6-467281b4fc68e", "record_id": "flaws_cloudtrail:0000039:ff5c0996-ab74-4d73-9ac6-467281b4fc68e", "row_index": 39, "timestamp": "2019-08-16T08:50:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5c0996-ab74-4d73-9ac6-467281b4fc68e", "eventTime": "2019-08-16T08:50:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5c0996-ab74-4d73-9ac6-467281b4fc68e", "record_id": "flaws_cloudtrail:0000040:ff5c0996-ab74-4d73-9ac6-467281b4fc68e", "row_index": 40, "timestamp": "2019-08-16T08:50:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5c0996-ab74-4d73-9ac6-467281b4fc68e", "eventTime": "2019-08-16T08:50:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "139e0a68-dcf9-4b64-bf05-22059eb3", "record_id": "flaws_cloudtrail:0000041:139e0a68-dcf9-4b64-bf05-22059eb3", "row_index": 41, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "139e0a68-dcf9-4b64-bf05-22059eb3", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e027d6c5-5fb1-4fb1-a01f-8f4da060b24e", "record_id": "flaws_cloudtrail:0000042:e027d6c5-5fb1-4fb1-a01f-8f4da060b24e", "row_index": 42, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e027d6c5-5fb1-4fb1-a01f-8f4da060b24e", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f95ea1a-0828-4802-ac72-aa4338d8dab0", "record_id": "flaws_cloudtrail:0000043:1f95ea1a-0828-4802-ac72-aa4338d8dab0", "row_index": 43, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f95ea1a-0828-4802-ac72-aa4338d8dab0", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fead4e69-9a5d-4a81-9a79-fe522510a2979", "record_id": "flaws_cloudtrail:0000044:fead4e69-9a5d-4a81-9a79-fe522510a2979", "row_index": 44, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fead4e69-9a5d-4a81-9a79-fe522510a2979", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5985ce5d-88c5-402d-80e1-d984a52c727b", "record_id": "flaws_cloudtrail:0000045:5985ce5d-88c5-402d-80e1-d984a52c727b", "row_index": 45, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5985ce5d-88c5-402d-80e1-d984a52c727b", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "139e0a68-dcf9-4b64-bf05-22059eb3", "record_id": "flaws_cloudtrail:0000046:139e0a68-dcf9-4b64-bf05-22059eb3", "row_index": 46, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "139e0a68-dcf9-4b64-bf05-22059eb3", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e027d6c5-5fb1-4fb1-a01f-8f4da060b24e", "record_id": "flaws_cloudtrail:0000047:e027d6c5-5fb1-4fb1-a01f-8f4da060b24e", "row_index": 47, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e027d6c5-5fb1-4fb1-a01f-8f4da060b24e", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f95ea1a-0828-4802-ac72-aa4338d8dab0", "record_id": "flaws_cloudtrail:0000048:1f95ea1a-0828-4802-ac72-aa4338d8dab0", "row_index": 48, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f95ea1a-0828-4802-ac72-aa4338d8dab0", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fead4e69-9a5d-4a81-9a79-fe522510a2979", "record_id": "flaws_cloudtrail:0000049:fead4e69-9a5d-4a81-9a79-fe522510a2979", "row_index": 49, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fead4e69-9a5d-4a81-9a79-fe522510a2979", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5985ce5d-88c5-402d-80e1-d984a52c727b", "record_id": "flaws_cloudtrail:0000050:5985ce5d-88c5-402d-80e1-d984a52c727b", "row_index": 50, "timestamp": "2019-08-16T08:50:59Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5985ce5d-88c5-402d-80e1-d984a52c727b", "eventTime": "2019-08-16T08:50:59Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d75fe21f-27b7-47ee-bf02-0ac08eb9dea6", "record_id": "flaws_cloudtrail:0000051:d75fe21f-27b7-47ee-bf02-0ac08eb9dea6", "row_index": 51, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d75fe21f-27b7-47ee-bf02-0ac08eb9dea6", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fd7e16f-3951-49a7-8e21-18e69aab3c15", "record_id": "flaws_cloudtrail:0000052:4fd7e16f-3951-49a7-8e21-18e69aab3c15", "row_index": 52, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fd7e16f-3951-49a7-8e21-18e69aab3c15", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7deb10e-a833-4f09-a87f-890447c9640f", "record_id": "flaws_cloudtrail:0000053:f7deb10e-a833-4f09-a87f-890447c9640f", "row_index": 53, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7deb10e-a833-4f09-a87f-890447c9640f", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e95ea54-3936-4f71-acce-acc159645381", "record_id": "flaws_cloudtrail:0000054:7e95ea54-3936-4f71-acce-acc159645381", "row_index": 54, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e95ea54-3936-4f71-acce-acc159645381", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d75fe21f-27b7-47ee-bf02-0ac08eb9dea6", "record_id": "flaws_cloudtrail:0000055:d75fe21f-27b7-47ee-bf02-0ac08eb9dea6", "row_index": 55, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d75fe21f-27b7-47ee-bf02-0ac08eb9dea6", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fd7e16f-3951-49a7-8e21-18e69aab3c15", "record_id": "flaws_cloudtrail:0000056:4fd7e16f-3951-49a7-8e21-18e69aab3c15", "row_index": 56, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fd7e16f-3951-49a7-8e21-18e69aab3c15", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7deb10e-a833-4f09-a87f-890447c9640f", "record_id": "flaws_cloudtrail:0000057:f7deb10e-a833-4f09-a87f-890447c9640f", "row_index": 57, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7deb10e-a833-4f09-a87f-890447c9640f", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e95ea54-3936-4f71-acce-acc159645381", "record_id": "flaws_cloudtrail:0000058:7e95ea54-3936-4f71-acce-acc159645381", "row_index": 58, "timestamp": "2019-08-16T08:51:00Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e95ea54-3936-4f71-acce-acc159645381", "eventTime": "2019-08-16T08:51:00Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf72dd8f-0ff6-4d29-a348-88b2fe5d22a7", "record_id": "flaws_cloudtrail:0000059:bf72dd8f-0ff6-4d29-a348-88b2fe5d22a7", "row_index": 59, "timestamp": "2019-08-16T08:51:01Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf72dd8f-0ff6-4d29-a348-88b2fe5d22a7", "eventTime": "2019-08-16T08:51:01Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f162c0b2-12df-4ee8-8b39-1a017028cce", "record_id": "flaws_cloudtrail:0000060:f162c0b2-12df-4ee8-8b39-1a017028cce", "row_index": 60, "timestamp": "2019-08-16T08:51:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f162c0b2-12df-4ee8-8b39-1a017028cce", "eventTime": "2019-08-16T08:51:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5f5bc5d-ddcf-41f0-8923-74de36e2f15d", "record_id": "flaws_cloudtrail:0000061:c5f5bc5d-ddcf-41f0-8923-74de36e2f15d", "row_index": 61, "timestamp": "2019-08-16T08:51:01Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5f5bc5d-ddcf-41f0-8923-74de36e2f15d", "eventTime": "2019-08-16T08:51:01Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf72dd8f-0ff6-4d29-a348-88b2fe5d22a7", "record_id": "flaws_cloudtrail:0000062:bf72dd8f-0ff6-4d29-a348-88b2fe5d22a7", "row_index": 62, "timestamp": "2019-08-16T08:51:01Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf72dd8f-0ff6-4d29-a348-88b2fe5d22a7", "eventTime": "2019-08-16T08:51:01Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f162c0b2-12df-4ee8-8b39-1a017028cce", "record_id": "flaws_cloudtrail:0000063:f162c0b2-12df-4ee8-8b39-1a017028cce", "row_index": 63, "timestamp": "2019-08-16T08:51:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f162c0b2-12df-4ee8-8b39-1a017028cce", "eventTime": "2019-08-16T08:51:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5f5bc5d-ddcf-41f0-8923-74de36e2f15d", "record_id": "flaws_cloudtrail:0000064:c5f5bc5d-ddcf-41f0-8923-74de36e2f15d", "row_index": 64, "timestamp": "2019-08-16T08:51:01Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5f5bc5d-ddcf-41f0-8923-74de36e2f15d", "eventTime": "2019-08-16T08:51:01Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cf031790-5a4f-4d0f-9199-18d28b7d5cf2", "record_id": "flaws_cloudtrail:0000065:9cf031790-5a4f-4d0f-9199-18d28b7d5cf2", "row_index": 65, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cf031790-5a4f-4d0f-9199-18d28b7d5cf2", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70036f2-60cb-4cc3-8e81-c65c2a63d632", "record_id": "flaws_cloudtrail:0000066:70036f2-60cb-4cc3-8e81-c65c2a63d632", "row_index": 66, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70036f2-60cb-4cc3-8e81-c65c2a63d632", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b0201a-c946-4f4c-a021-2117cec2eb9e", "record_id": "flaws_cloudtrail:0000067:39b0201a-c946-4f4c-a021-2117cec2eb9e", "row_index": 67, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b0201a-c946-4f4c-a021-2117cec2eb9e", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "203611c91-3934-4feb-9dee-7076edc235de", "record_id": "flaws_cloudtrail:0000068:203611c91-3934-4feb-9dee-7076edc235de", "row_index": 68, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "203611c91-3934-4feb-9dee-7076edc235de", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac96424-ed2e-4171-9930-cd6eb1ee04b6", "record_id": "flaws_cloudtrail:0000069:6ac96424-ed2e-4171-9930-cd6eb1ee04b6", "row_index": 69, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac96424-ed2e-4171-9930-cd6eb1ee04b6", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cf031790-5a4f-4d0f-9199-18d28b7d5cf2", "record_id": "flaws_cloudtrail:0000070:9cf031790-5a4f-4d0f-9199-18d28b7d5cf2", "row_index": 70, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cf031790-5a4f-4d0f-9199-18d28b7d5cf2", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70036f2-60cb-4cc3-8e81-c65c2a63d632", "record_id": "flaws_cloudtrail:0000071:70036f2-60cb-4cc3-8e81-c65c2a63d632", "row_index": 71, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70036f2-60cb-4cc3-8e81-c65c2a63d632", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b0201a-c946-4f4c-a021-2117cec2eb9e", "record_id": "flaws_cloudtrail:0000072:39b0201a-c946-4f4c-a021-2117cec2eb9e", "row_index": 72, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b0201a-c946-4f4c-a021-2117cec2eb9e", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "203611c91-3934-4feb-9dee-7076edc235de", "record_id": "flaws_cloudtrail:0000073:203611c91-3934-4feb-9dee-7076edc235de", "row_index": 73, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "203611c91-3934-4feb-9dee-7076edc235de", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac96424-ed2e-4171-9930-cd6eb1ee04b6", "record_id": "flaws_cloudtrail:0000074:6ac96424-ed2e-4171-9930-cd6eb1ee04b6", "row_index": 74, "timestamp": "2019-08-16T08:51:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac96424-ed2e-4171-9930-cd6eb1ee04b6", "eventTime": "2019-08-16T08:51:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ad19c4-2ffa-44a4-8d8e-68fddb4a8600", "record_id": "flaws_cloudtrail:0000075:18ad19c4-2ffa-44a4-8d8e-68fddb4a8600", "row_index": 75, "timestamp": "2019-08-16T08:51:03Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ad19c4-2ffa-44a4-8d8e-68fddb4a8600", "eventTime": "2019-08-16T08:51:03Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1cc25f8-651b-4c69-9ac4-06989fda4271", "record_id": "flaws_cloudtrail:0000076:a1cc25f8-651b-4c69-9ac4-06989fda4271", "row_index": 76, "timestamp": "2019-08-16T08:51:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1cc25f8-651b-4c69-9ac4-06989fda4271", "eventTime": "2019-08-16T08:51:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3576e95-cb82-427c-8ffd-fe6d597a95b1", "record_id": "flaws_cloudtrail:0000077:d3576e95-cb82-427c-8ffd-fe6d597a95b1", "row_index": 77, "timestamp": "2019-08-16T08:51:03Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3576e95-cb82-427c-8ffd-fe6d597a95b1", "eventTime": "2019-08-16T08:51:03Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ad19c4-2ffa-44a4-8d8e-68fddb4a8600", "record_id": "flaws_cloudtrail:0000078:18ad19c4-2ffa-44a4-8d8e-68fddb4a8600", "row_index": 78, "timestamp": "2019-08-16T08:51:03Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ad19c4-2ffa-44a4-8d8e-68fddb4a8600", "eventTime": "2019-08-16T08:51:03Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1cc25f8-651b-4c69-9ac4-06989fda4271", "record_id": "flaws_cloudtrail:0000079:a1cc25f8-651b-4c69-9ac4-06989fda4271", "row_index": 79, "timestamp": "2019-08-16T08:51:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1cc25f8-651b-4c69-9ac4-06989fda4271", "eventTime": "2019-08-16T08:51:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3576e95-cb82-427c-8ffd-fe6d597a95b1", "record_id": "flaws_cloudtrail:0000080:d3576e95-cb82-427c-8ffd-fe6d597a95b1", "row_index": 80, "timestamp": "2019-08-16T08:51:03Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3576e95-cb82-427c-8ffd-fe6d597a95b1", "eventTime": "2019-08-16T08:51:03Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "635a8d05-68ed-4190-8f5b-3b2db5ad1787", "record_id": "flaws_cloudtrail:0000081:635a8d05-68ed-4190-8f5b-3b2db5ad1787", "row_index": 81, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 888, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "635a8d05-68ed-4190-8f5b-3b2db5ad1787", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-south-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e7adf1-c323-4283-9990-564f827972d", "record_id": "flaws_cloudtrail:0000082:f4e7adf1-c323-4283-9990-564f827972d", "row_index": 82, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e7adf1-c323-4283-9990-564f827972d", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ca-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0767f5-3e49-4f4c-83f6-08e6c7949bb0", "record_id": "flaws_cloudtrail:0000083:3b0767f5-3e49-4f4c-83f6-08e6c7949bb0", "row_index": 83, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0767f5-3e49-4f4c-83f6-08e6c7949bb0", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81da094d-7428-4283-8b56-e375a8f4627c", "record_id": "flaws_cloudtrail:0000084:81da094d-7428-4283-8b56-e375a8f4627c", "row_index": 84, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81da094d-7428-4283-8b56-e375a8f4627c", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-north-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ef206e0-1d34-4cbc-b7ff-5a23c870f2dc", "record_id": "flaws_cloudtrail:0000085:0ef206e0-1d34-4cbc-b7ff-5a23c870f2dc", "row_index": 85, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ef206e0-1d34-4cbc-b7ff-5a23c870f2dc", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7308a79-299b-4425-a846-ad18455aa", "record_id": "flaws_cloudtrail:0000086:a7308a79-299b-4425-a846-ad18455aa", "row_index": 86, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7308a79-299b-4425-a846-ad18455aa", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-3:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "635a8d05-68ed-4190-8f5b-3b2db5ad1787", "record_id": "flaws_cloudtrail:0000087:635a8d05-68ed-4190-8f5b-3b2db5ad1787", "row_index": 87, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 888, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "635a8d05-68ed-4190-8f5b-3b2db5ad1787", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-south-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e7adf1-c323-4283-9990-564f827972d", "record_id": "flaws_cloudtrail:0000088:f4e7adf1-c323-4283-9990-564f827972d", "row_index": 88, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e7adf1-c323-4283-9990-564f827972d", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ca-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b0767f5-3e49-4f4c-83f6-08e6c7949bb0", "record_id": "flaws_cloudtrail:0000089:3b0767f5-3e49-4f4c-83f6-08e6c7949bb0", "row_index": 89, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b0767f5-3e49-4f4c-83f6-08e6c7949bb0", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81da094d-7428-4283-8b56-e375a8f4627c", "record_id": "flaws_cloudtrail:0000090:81da094d-7428-4283-8b56-e375a8f4627c", "row_index": 90, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81da094d-7428-4283-8b56-e375a8f4627c", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-north-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ef206e0-1d34-4cbc-b7ff-5a23c870f2dc", "record_id": "flaws_cloudtrail:0000091:0ef206e0-1d34-4cbc-b7ff-5a23c870f2dc", "row_index": 91, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ef206e0-1d34-4cbc-b7ff-5a23c870f2dc", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7308a79-299b-4425-a846-ad18455aa", "record_id": "flaws_cloudtrail:0000092:a7308a79-299b-4425-a846-ad18455aa", "row_index": 92, "timestamp": "2019-08-16T08:51:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7308a79-299b-4425-a846-ad18455aa", "eventTime": "2019-08-16T08:51:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-3:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02dd9939-5b26-4547-8506-c8e39b8773d3", "record_id": "flaws_cloudtrail:0000093:02dd9939-5b26-4547-8506-c8e39b8773d3", "row_index": 93, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02dd9939-5b26-4547-8506-c8e39b8773d3", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390165dc2-1c5f-43ad-8287-b9db49b0cc98", "record_id": "flaws_cloudtrail:0000094:390165dc2-1c5f-43ad-8287-b9db49b0cc98", "row_index": 94, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390165dc2-1c5f-43ad-8287-b9db49b0cc98", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:sa-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f1a71f-1c99-4e72-9e9b-327cc0df2cdb", "record_id": "flaws_cloudtrail:0000095:68f1a71f-1c99-4e72-9e9b-327cc0df2cdb", "row_index": 95, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f1a71f-1c99-4e72-9e9b-327cc0df2cdb", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35274-7de9-4e24-8c05-6ea25a261367", "record_id": "flaws_cloudtrail:0000096:35274-7de9-4e24-8c05-6ea25a261367", "row_index": 96, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35274-7de9-4e24-8c05-6ea25a261367", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0dc9a1-1013-48fa-b7d5-45af0e4b787f", "record_id": "flaws_cloudtrail:0000097:ef0dc9a1-1013-48fa-b7d5-45af0e4b787f", "row_index": 97, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0dc9a1-1013-48fa-b7d5-45af0e4b787f", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02dd9939-5b26-4547-8506-c8e39b8773d3", "record_id": "flaws_cloudtrail:0000098:02dd9939-5b26-4547-8506-c8e39b8773d3", "row_index": 98, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02dd9939-5b26-4547-8506-c8e39b8773d3", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390165dc2-1c5f-43ad-8287-b9db49b0cc98", "record_id": "flaws_cloudtrail:0000099:390165dc2-1c5f-43ad-8287-b9db49b0cc98", "row_index": 99, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390165dc2-1c5f-43ad-8287-b9db49b0cc98", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:sa-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f1a71f-1c99-4e72-9e9b-327cc0df2cdb", "record_id": "flaws_cloudtrail:0000100:68f1a71f-1c99-4e72-9e9b-327cc0df2cdb", "row_index": 100, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f1a71f-1c99-4e72-9e9b-327cc0df2cdb", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35274-7de9-4e24-8c05-6ea25a261367", "record_id": "flaws_cloudtrail:0000101:35274-7de9-4e24-8c05-6ea25a261367", "row_index": 101, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35274-7de9-4e24-8c05-6ea25a261367", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0dc9a1-1013-48fa-b7d5-45af0e4b787f", "record_id": "flaws_cloudtrail:0000102:ef0dc9a1-1013-48fa-b7d5-45af0e4b787f", "row_index": 102, "timestamp": "2019-08-16T08:51:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0dc9a1-1013-48fa-b7d5-45af0e4b787f", "eventTime": "2019-08-16T08:51:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06caf5a-193f-44e0-ac52-001937a94253", "record_id": "flaws_cloudtrail:0000103:f06caf5a-193f-44e0-ac52-001937a94253", "row_index": 103, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06caf5a-193f-44e0-ac52-001937a94253", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e25eb96-ac3a-4a72-8204-0ed26ddb5916", "record_id": "flaws_cloudtrail:0000104:0e25eb96-ac3a-4a72-8204-0ed26ddb5916", "row_index": 104, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e25eb96-ac3a-4a72-8204-0ed26ddb5916", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bbb2f2b-a27a-464c-bb23-8ca78f834c5d", "record_id": "flaws_cloudtrail:0000105:8bbb2f2b-a27a-464c-bb23-8ca78f834c5d", "row_index": 105, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bbb2f2b-a27a-464c-bb23-8ca78f834c5d", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e6e6b0-f4ea-4c8f-8eac-3b55c39fed85", "record_id": "flaws_cloudtrail:0000106:73e6e6b0-f4ea-4c8f-8eac-3b55c39fed85", "row_index": 106, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e6e6b0-f4ea-4c8f-8eac-3b55c39fed85", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28494e3f-e27e-41ae-ae16-9f14cfd38abb", "record_id": "flaws_cloudtrail:0000107:28494e3f-e27e-41ae-ae16-9f14cfd38abb", "row_index": 107, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28494e3f-e27e-41ae-ae16-9f14cfd38abb", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d2486c3-aff9-43ab-b954-d1acf9bdb439", "record_id": "flaws_cloudtrail:0000108:1d2486c3-aff9-43ab-b954-d1acf9bdb439", "row_index": 108, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d2486c3-aff9-43ab-b954-d1acf9bdb439", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c79ab6f-71f9-470e-93da-83dbc8abaaec", "record_id": "flaws_cloudtrail:0000109:3c79ab6f-71f9-470e-93da-83dbc8abaaec", "row_index": 109, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c79ab6f-71f9-470e-93da-83dbc8abaaec", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84863f23-fed5-4413-84e3-6fcfd95105", "record_id": "flaws_cloudtrail:0000110:84863f23-fed5-4413-84e3-6fcfd95105", "row_index": 110, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84863f23-fed5-4413-84e3-6fcfd95105", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b060b1e-29a8-40b3-beb2-d168abd8fca4", "record_id": "flaws_cloudtrail:0000111:7b060b1e-29a8-40b3-beb2-d168abd8fca4", "row_index": 111, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b060b1e-29a8-40b3-beb2-d168abd8fca4", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c936018-39d2-4bed-9ad8-034cf0efa6b7", "record_id": "flaws_cloudtrail:0000112:8c936018-39d2-4bed-9ad8-034cf0efa6b7", "row_index": 112, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c936018-39d2-4bed-9ad8-034cf0efa6b7", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "545c8a2a-35cc-4aa6-a22c-8c9d542ec2e4", "record_id": "flaws_cloudtrail:0000113:545c8a2a-35cc-4aa6-a22c-8c9d542ec2e4", "row_index": 113, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "545c8a2a-35cc-4aa6-a22c-8c9d542ec2e4", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144351db-14bc-4ded-a218-1ccd77c2daba", "record_id": "flaws_cloudtrail:0000114:144351db-14bc-4ded-a218-1ccd77c2daba", "row_index": 114, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144351db-14bc-4ded-a218-1ccd77c2daba", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f83410c-110c-4432-9f26-58cfb07d5e1f", "record_id": "flaws_cloudtrail:0000115:f83410c-110c-4432-9f26-58cfb07d5e1f", "row_index": 115, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f83410c-110c-4432-9f26-58cfb07d5e1f", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c21ffca3-c2fa-466d-b26c-4264784decc2", "record_id": "flaws_cloudtrail:0000116:c21ffca3-c2fa-466d-b26c-4264784decc2", "row_index": 116, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c21ffca3-c2fa-466d-b26c-4264784decc2", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06caf5a-193f-44e0-ac52-001937a94253", "record_id": "flaws_cloudtrail:0000117:f06caf5a-193f-44e0-ac52-001937a94253", "row_index": 117, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06caf5a-193f-44e0-ac52-001937a94253", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e25eb96-ac3a-4a72-8204-0ed26ddb5916", "record_id": "flaws_cloudtrail:0000118:0e25eb96-ac3a-4a72-8204-0ed26ddb5916", "row_index": 118, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e25eb96-ac3a-4a72-8204-0ed26ddb5916", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bbb2f2b-a27a-464c-bb23-8ca78f834c5d", "record_id": "flaws_cloudtrail:0000119:8bbb2f2b-a27a-464c-bb23-8ca78f834c5d", "row_index": 119, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bbb2f2b-a27a-464c-bb23-8ca78f834c5d", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e6e6b0-f4ea-4c8f-8eac-3b55c39fed85", "record_id": "flaws_cloudtrail:0000120:73e6e6b0-f4ea-4c8f-8eac-3b55c39fed85", "row_index": 120, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e6e6b0-f4ea-4c8f-8eac-3b55c39fed85", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28494e3f-e27e-41ae-ae16-9f14cfd38abb", "record_id": "flaws_cloudtrail:0000121:28494e3f-e27e-41ae-ae16-9f14cfd38abb", "row_index": 121, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28494e3f-e27e-41ae-ae16-9f14cfd38abb", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d2486c3-aff9-43ab-b954-d1acf9bdb439", "record_id": "flaws_cloudtrail:0000122:1d2486c3-aff9-43ab-b954-d1acf9bdb439", "row_index": 122, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d2486c3-aff9-43ab-b954-d1acf9bdb439", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c79ab6f-71f9-470e-93da-83dbc8abaaec", "record_id": "flaws_cloudtrail:0000123:3c79ab6f-71f9-470e-93da-83dbc8abaaec", "row_index": 123, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c79ab6f-71f9-470e-93da-83dbc8abaaec", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84863f23-fed5-4413-84e3-6fcfd95105", "record_id": "flaws_cloudtrail:0000124:84863f23-fed5-4413-84e3-6fcfd95105", "row_index": 124, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84863f23-fed5-4413-84e3-6fcfd95105", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b060b1e-29a8-40b3-beb2-d168abd8fca4", "record_id": "flaws_cloudtrail:0000125:7b060b1e-29a8-40b3-beb2-d168abd8fca4", "row_index": 125, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b060b1e-29a8-40b3-beb2-d168abd8fca4", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c936018-39d2-4bed-9ad8-034cf0efa6b7", "record_id": "flaws_cloudtrail:0000126:8c936018-39d2-4bed-9ad8-034cf0efa6b7", "row_index": 126, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c936018-39d2-4bed-9ad8-034cf0efa6b7", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "545c8a2a-35cc-4aa6-a22c-8c9d542ec2e4", "record_id": "flaws_cloudtrail:0000127:545c8a2a-35cc-4aa6-a22c-8c9d542ec2e4", "row_index": 127, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "545c8a2a-35cc-4aa6-a22c-8c9d542ec2e4", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144351db-14bc-4ded-a218-1ccd77c2daba", "record_id": "flaws_cloudtrail:0000128:144351db-14bc-4ded-a218-1ccd77c2daba", "row_index": 128, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144351db-14bc-4ded-a218-1ccd77c2daba", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f83410c-110c-4432-9f26-58cfb07d5e1f", "record_id": "flaws_cloudtrail:0000129:f83410c-110c-4432-9f26-58cfb07d5e1f", "row_index": 129, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f83410c-110c-4432-9f26-58cfb07d5e1f", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c21ffca3-c2fa-466d-b26c-4264784decc2", "record_id": "flaws_cloudtrail:0000130:c21ffca3-c2fa-466d-b26c-4264784decc2", "row_index": 130, "timestamp": "2019-08-16T08:51:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c21ffca3-c2fa-466d-b26c-4264784decc2", "eventTime": "2019-08-16T08:51:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ab064da-4620-4fe9-a1cb-9ea46ae6bd7d", "record_id": "flaws_cloudtrail:0000131:9ab064da-4620-4fe9-a1cb-9ea46ae6bd7d", "row_index": 131, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ab064da-4620-4fe9-a1cb-9ea46ae6bd7d", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ab6d51-ef28-41f2-8bf5-7a2c94c008223", "record_id": "flaws_cloudtrail:0000132:59ab6d51-ef28-41f2-8bf5-7a2c94c008223", "row_index": 132, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ab6d51-ef28-41f2-8bf5-7a2c94c008223", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9925e7d0-f347-4bd6-b339-8bba2b9f1232", "record_id": "flaws_cloudtrail:0000133:9925e7d0-f347-4bd6-b339-8bba2b9f1232", "row_index": 133, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9925e7d0-f347-4bd6-b339-8bba2b9f1232", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "302596b98-e495-4536-872e-1038ffbbd9e8", "record_id": "flaws_cloudtrail:0000134:302596b98-e495-4536-872e-1038ffbbd9e8", "row_index": 134, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "302596b98-e495-4536-872e-1038ffbbd9e8", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab046b9-3df4-421f-bcbe-a275acb30577", "record_id": "flaws_cloudtrail:0000135:4ab046b9-3df4-421f-bcbe-a275acb30577", "row_index": 135, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab046b9-3df4-421f-bcbe-a275acb30577", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a427598-afab-4187-ad40-79852c880e50", "record_id": "flaws_cloudtrail:0000136:a427598-afab-4187-ad40-79852c880e50", "row_index": 136, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a427598-afab-4187-ad40-79852c880e50", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e838cc06-7d4c-401e-a9bd-a1c8590495c1", "record_id": "flaws_cloudtrail:0000137:e838cc06-7d4c-401e-a9bd-a1c8590495c1", "row_index": 137, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e838cc06-7d4c-401e-a9bd-a1c8590495c1", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1872f2a4-64f8-44e1-aeb2-b2b62f7d030f", "record_id": "flaws_cloudtrail:0000138:1872f2a4-64f8-44e1-aeb2-b2b62f7d030f", "row_index": 138, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1872f2a4-64f8-44e1-aeb2-b2b62f7d030f", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453866f3a-1d85-478a-8743-90866e", "record_id": "flaws_cloudtrail:0000139:453866f3a-1d85-478a-8743-90866e", "row_index": 139, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453866f3a-1d85-478a-8743-90866e", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "480270ac3-2a07-4cd9-bb19-b0391a77f05d", "record_id": "flaws_cloudtrail:0000140:480270ac3-2a07-4cd9-bb19-b0391a77f05d", "row_index": 140, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "480270ac3-2a07-4cd9-bb19-b0391a77f05d", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37e2ecdd-505b-4a9c-9306-87c74e284d3c", "record_id": "flaws_cloudtrail:0000141:37e2ecdd-505b-4a9c-9306-87c74e284d3c", "row_index": 141, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37e2ecdd-505b-4a9c-9306-87c74e284d3c", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153738-bf14-43c1-9939-77258de5f46", "record_id": "flaws_cloudtrail:0000142:153738-bf14-43c1-9939-77258de5f46", "row_index": 142, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153738-bf14-43c1-9939-77258de5f46", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f967137-eaf2-4ec1-bef2-3f51998a", "record_id": "flaws_cloudtrail:0000143:9f967137-eaf2-4ec1-bef2-3f51998a", "row_index": 143, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f967137-eaf2-4ec1-bef2-3f51998a", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d29601c-ae14-4b10-970d-5d9e33954ee1", "record_id": "flaws_cloudtrail:0000144:7d29601c-ae14-4b10-970d-5d9e33954ee1", "row_index": 144, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d29601c-ae14-4b10-970d-5d9e33954ee1", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1ba4c2a-558a-4cbe-bdd1-191d4757e009", "record_id": "flaws_cloudtrail:0000145:f1ba4c2a-558a-4cbe-bdd1-191d4757e009", "row_index": 145, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1ba4c2a-558a-4cbe-bdd1-191d4757e009", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e45125-3362-4772-9e66-9ee3c1c60a26", "record_id": "flaws_cloudtrail:0000146:9e45125-3362-4772-9e66-9ee3c1c60a26", "row_index": 146, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e45125-3362-4772-9e66-9ee3c1c60a26", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4722ba14-4b23-4cb5-a568-4df5d18f79ac", "record_id": "flaws_cloudtrail:0000147:4722ba14-4b23-4cb5-a568-4df5d18f79ac", "row_index": 147, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4722ba14-4b23-4cb5-a568-4df5d18f79ac", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c812cbf-f4a0-44cf-8874-bcd16a781c29", "record_id": "flaws_cloudtrail:0000148:4c812cbf-f4a0-44cf-8874-bcd16a781c29", "row_index": 148, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c812cbf-f4a0-44cf-8874-bcd16a781c29", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76fae0a1-e8d4-4c22-bac1-917f7b9b20db", "record_id": "flaws_cloudtrail:0000149:76fae0a1-e8d4-4c22-bac1-917f7b9b20db", "row_index": 149, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76fae0a1-e8d4-4c22-bac1-917f7b9b20db", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01a27a6-6861-4b07-ae0b-bed0904f3ce6", "record_id": "flaws_cloudtrail:0000150:d01a27a6-6861-4b07-ae0b-bed0904f3ce6", "row_index": 150, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01a27a6-6861-4b07-ae0b-bed0904f3ce6", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c08d1f79-6987-4a08-b53a-c56d5f3b7f94", "record_id": "flaws_cloudtrail:0000151:c08d1f79-6987-4a08-b53a-c56d5f3b7f94", "row_index": 151, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c08d1f79-6987-4a08-b53a-c56d5f3b7f94", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ab064da-4620-4fe9-a1cb-9ea46ae6bd7d", "record_id": "flaws_cloudtrail:0000152:9ab064da-4620-4fe9-a1cb-9ea46ae6bd7d", "row_index": 152, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ab064da-4620-4fe9-a1cb-9ea46ae6bd7d", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ab6d51-ef28-41f2-8bf5-7a2c94c008223", "record_id": "flaws_cloudtrail:0000153:59ab6d51-ef28-41f2-8bf5-7a2c94c008223", "row_index": 153, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ab6d51-ef28-41f2-8bf5-7a2c94c008223", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9925e7d0-f347-4bd6-b339-8bba2b9f1232", "record_id": "flaws_cloudtrail:0000154:9925e7d0-f347-4bd6-b339-8bba2b9f1232", "row_index": 154, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9925e7d0-f347-4bd6-b339-8bba2b9f1232", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "302596b98-e495-4536-872e-1038ffbbd9e8", "record_id": "flaws_cloudtrail:0000155:302596b98-e495-4536-872e-1038ffbbd9e8", "row_index": 155, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "302596b98-e495-4536-872e-1038ffbbd9e8", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab046b9-3df4-421f-bcbe-a275acb30577", "record_id": "flaws_cloudtrail:0000156:4ab046b9-3df4-421f-bcbe-a275acb30577", "row_index": 156, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab046b9-3df4-421f-bcbe-a275acb30577", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a427598-afab-4187-ad40-79852c880e50", "record_id": "flaws_cloudtrail:0000157:a427598-afab-4187-ad40-79852c880e50", "row_index": 157, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a427598-afab-4187-ad40-79852c880e50", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e838cc06-7d4c-401e-a9bd-a1c8590495c1", "record_id": "flaws_cloudtrail:0000158:e838cc06-7d4c-401e-a9bd-a1c8590495c1", "row_index": 158, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e838cc06-7d4c-401e-a9bd-a1c8590495c1", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1872f2a4-64f8-44e1-aeb2-b2b62f7d030f", "record_id": "flaws_cloudtrail:0000159:1872f2a4-64f8-44e1-aeb2-b2b62f7d030f", "row_index": 159, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1872f2a4-64f8-44e1-aeb2-b2b62f7d030f", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453866f3a-1d85-478a-8743-90866e", "record_id": "flaws_cloudtrail:0000160:453866f3a-1d85-478a-8743-90866e", "row_index": 160, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453866f3a-1d85-478a-8743-90866e", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "480270ac3-2a07-4cd9-bb19-b0391a77f05d", "record_id": "flaws_cloudtrail:0000161:480270ac3-2a07-4cd9-bb19-b0391a77f05d", "row_index": 161, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "480270ac3-2a07-4cd9-bb19-b0391a77f05d", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37e2ecdd-505b-4a9c-9306-87c74e284d3c", "record_id": "flaws_cloudtrail:0000162:37e2ecdd-505b-4a9c-9306-87c74e284d3c", "row_index": 162, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37e2ecdd-505b-4a9c-9306-87c74e284d3c", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153738-bf14-43c1-9939-77258de5f46", "record_id": "flaws_cloudtrail:0000163:153738-bf14-43c1-9939-77258de5f46", "row_index": 163, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153738-bf14-43c1-9939-77258de5f46", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f967137-eaf2-4ec1-bef2-3f51998a", "record_id": "flaws_cloudtrail:0000164:9f967137-eaf2-4ec1-bef2-3f51998a", "row_index": 164, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f967137-eaf2-4ec1-bef2-3f51998a", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d29601c-ae14-4b10-970d-5d9e33954ee1", "record_id": "flaws_cloudtrail:0000165:7d29601c-ae14-4b10-970d-5d9e33954ee1", "row_index": 165, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d29601c-ae14-4b10-970d-5d9e33954ee1", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1ba4c2a-558a-4cbe-bdd1-191d4757e009", "record_id": "flaws_cloudtrail:0000166:f1ba4c2a-558a-4cbe-bdd1-191d4757e009", "row_index": 166, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1ba4c2a-558a-4cbe-bdd1-191d4757e009", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e45125-3362-4772-9e66-9ee3c1c60a26", "record_id": "flaws_cloudtrail:0000167:9e45125-3362-4772-9e66-9ee3c1c60a26", "row_index": 167, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e45125-3362-4772-9e66-9ee3c1c60a26", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4722ba14-4b23-4cb5-a568-4df5d18f79ac", "record_id": "flaws_cloudtrail:0000168:4722ba14-4b23-4cb5-a568-4df5d18f79ac", "row_index": 168, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4722ba14-4b23-4cb5-a568-4df5d18f79ac", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c812cbf-f4a0-44cf-8874-bcd16a781c29", "record_id": "flaws_cloudtrail:0000169:4c812cbf-f4a0-44cf-8874-bcd16a781c29", "row_index": 169, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c812cbf-f4a0-44cf-8874-bcd16a781c29", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76fae0a1-e8d4-4c22-bac1-917f7b9b20db", "record_id": "flaws_cloudtrail:0000170:76fae0a1-e8d4-4c22-bac1-917f7b9b20db", "row_index": 170, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76fae0a1-e8d4-4c22-bac1-917f7b9b20db", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01a27a6-6861-4b07-ae0b-bed0904f3ce6", "record_id": "flaws_cloudtrail:0000171:d01a27a6-6861-4b07-ae0b-bed0904f3ce6", "row_index": 171, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01a27a6-6861-4b07-ae0b-bed0904f3ce6", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c08d1f79-6987-4a08-b53a-c56d5f3b7f94", "record_id": "flaws_cloudtrail:0000172:c08d1f79-6987-4a08-b53a-c56d5f3b7f94", "row_index": 172, "timestamp": "2019-08-16T08:51:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c08d1f79-6987-4a08-b53a-c56d5f3b7f94", "eventTime": "2019-08-16T08:51:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44a09c4-6563-41d1-acd7-2d2c4aab0ba2", "record_id": "flaws_cloudtrail:0000173:f44a09c4-6563-41d1-acd7-2d2c4aab0ba2", "row_index": 173, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44a09c4-6563-41d1-acd7-2d2c4aab0ba2", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d93e7014-07ca-42e3-bfcf-5f53e513c8ca", "record_id": "flaws_cloudtrail:0000174:d93e7014-07ca-42e3-bfcf-5f53e513c8ca", "row_index": 174, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d93e7014-07ca-42e3-bfcf-5f53e513c8ca", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35000f7-3e64-4584-95e2-53b9dc8b201d", "record_id": "flaws_cloudtrail:0000175:35000f7-3e64-4584-95e2-53b9dc8b201d", "row_index": 175, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35000f7-3e64-4584-95e2-53b9dc8b201d", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d384079-055c-4cde-a082-574ab7ed2834", "record_id": "flaws_cloudtrail:0000176:d384079-055c-4cde-a082-574ab7ed2834", "row_index": 176, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d384079-055c-4cde-a082-574ab7ed2834", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44a09c4-6563-41d1-acd7-2d2c4aab0ba2", "record_id": "flaws_cloudtrail:0000177:f44a09c4-6563-41d1-acd7-2d2c4aab0ba2", "row_index": 177, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44a09c4-6563-41d1-acd7-2d2c4aab0ba2", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d93e7014-07ca-42e3-bfcf-5f53e513c8ca", "record_id": "flaws_cloudtrail:0000178:d93e7014-07ca-42e3-bfcf-5f53e513c8ca", "row_index": 178, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d93e7014-07ca-42e3-bfcf-5f53e513c8ca", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35000f7-3e64-4584-95e2-53b9dc8b201d", "record_id": "flaws_cloudtrail:0000179:35000f7-3e64-4584-95e2-53b9dc8b201d", "row_index": 179, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35000f7-3e64-4584-95e2-53b9dc8b201d", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d384079-055c-4cde-a082-574ab7ed2834", "record_id": "flaws_cloudtrail:0000180:d384079-055c-4cde-a082-574ab7ed2834", "row_index": 180, "timestamp": "2019-08-16T08:51:08Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d384079-055c-4cde-a082-574ab7ed2834", "eventTime": "2019-08-16T08:51:08Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d6cb9f6-5bf8-4e60-bdd9-b016606d196f9", "record_id": "flaws_cloudtrail:0000181:7d6cb9f6-5bf8-4e60-bdd9-b016606d196f9", "row_index": 181, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d6cb9f6-5bf8-4e60-bdd9-b016606d196f9", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "563e5f33-5d2c-4794-9625-649e1a4a3c31", "record_id": "flaws_cloudtrail:0000182:563e5f33-5d2c-4794-9625-649e1a4a3c31", "row_index": 182, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 961, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "563e5f33-5d2c-4794-9625-649e1a4a3c31", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "567efcd8-4943-40d1-8586-1efd07e035826", "record_id": "flaws_cloudtrail:0000183:567efcd8-4943-40d1-8586-1efd07e035826", "row_index": 183, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "567efcd8-4943-40d1-8586-1efd07e035826", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "375c0cb0-cff7-4603-8f2d-f00e00f0d529", "record_id": "flaws_cloudtrail:0000184:375c0cb0-cff7-4603-8f2d-f00e00f0d529", "row_index": 184, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "375c0cb0-cff7-4603-8f2d-f00e00f0d529", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d6cb9f6-5bf8-4e60-bdd9-b016606d196f9", "record_id": "flaws_cloudtrail:0000185:7d6cb9f6-5bf8-4e60-bdd9-b016606d196f9", "row_index": 185, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d6cb9f6-5bf8-4e60-bdd9-b016606d196f9", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "563e5f33-5d2c-4794-9625-649e1a4a3c31", "record_id": "flaws_cloudtrail:0000186:563e5f33-5d2c-4794-9625-649e1a4a3c31", "row_index": 186, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 961, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "563e5f33-5d2c-4794-9625-649e1a4a3c31", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "567efcd8-4943-40d1-8586-1efd07e035826", "record_id": "flaws_cloudtrail:0000187:567efcd8-4943-40d1-8586-1efd07e035826", "row_index": 187, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "567efcd8-4943-40d1-8586-1efd07e035826", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "375c0cb0-cff7-4603-8f2d-f00e00f0d529", "record_id": "flaws_cloudtrail:0000188:375c0cb0-cff7-4603-8f2d-f00e00f0d529", "row_index": 188, "timestamp": "2019-08-16T08:51:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "375c0cb0-cff7-4603-8f2d-f00e00f0d529", "eventTime": "2019-08-16T08:51:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "511ce1f6-fa12-4f9d-bae0-1442e540f92d", "record_id": "flaws_cloudtrail:0000189:511ce1f6-fa12-4f9d-bae0-1442e540f92d", "row_index": 189, "timestamp": "2019-08-16T08:51:10Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "511ce1f6-fa12-4f9d-bae0-1442e540f92d", "eventTime": "2019-08-16T08:51:10Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ff470259-d2f2-4e52-90bb-5003f5375f9a", "record_id": "flaws_cloudtrail:0000190:3ff470259-d2f2-4e52-90bb-5003f5375f9a", "row_index": 190, "timestamp": "2019-08-16T08:51:10Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ff470259-d2f2-4e52-90bb-5003f5375f9a", "eventTime": "2019-08-16T08:51:10Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "511ce1f6-fa12-4f9d-bae0-1442e540f92d", "record_id": "flaws_cloudtrail:0000191:511ce1f6-fa12-4f9d-bae0-1442e540f92d", "row_index": 191, "timestamp": "2019-08-16T08:51:10Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "511ce1f6-fa12-4f9d-bae0-1442e540f92d", "eventTime": "2019-08-16T08:51:10Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ff470259-d2f2-4e52-90bb-5003f5375f9a", "record_id": "flaws_cloudtrail:0000192:3ff470259-d2f2-4e52-90bb-5003f5375f9a", "row_index": 192, "timestamp": "2019-08-16T08:51:10Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ff470259-d2f2-4e52-90bb-5003f5375f9a", "eventTime": "2019-08-16T08:51:10Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0591fbc9-eea9-420a-9d19-faced169665", "record_id": "flaws_cloudtrail:0000193:0591fbc9-eea9-420a-9d19-faced169665", "row_index": 193, "timestamp": "2019-08-16T08:51:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0591fbc9-eea9-420a-9d19-faced169665", "eventTime": "2019-08-16T08:51:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16fbff01-8368-4fe7-a3f6-b7bbd7832b34", "record_id": "flaws_cloudtrail:0000194:16fbff01-8368-4fe7-a3f6-b7bbd7832b34", "row_index": 194, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16fbff01-8368-4fe7-a3f6-b7bbd7832b34", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3ffbe7-ced2-4ad4-9b00-e743e21be979", "record_id": "flaws_cloudtrail:0000195:fa3ffbe7-ced2-4ad4-9b00-e743e21be979", "row_index": 195, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3ffbe7-ced2-4ad4-9b00-e743e21be979", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d16f840f-5f2c-48bb-a871-6b78dcd93281", "record_id": "flaws_cloudtrail:0000196:d16f840f-5f2c-48bb-a871-6b78dcd93281", "row_index": 196, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d16f840f-5f2c-48bb-a871-6b78dcd93281", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09484f-fced-47f3-8cd1-dd0f1bfde248", "record_id": "flaws_cloudtrail:0000197:09484f-fced-47f3-8cd1-dd0f1bfde248", "row_index": 197, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09484f-fced-47f3-8cd1-dd0f1bfde248", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "529acddd-a749-4c84-98a3-9ccc97da2178", "record_id": "flaws_cloudtrail:0000198:529acddd-a749-4c84-98a3-9ccc97da2178", "row_index": 198, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "529acddd-a749-4c84-98a3-9ccc97da2178", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7a2cbbc-1ac9-466b-ba72-342e90d8c69b", "record_id": "flaws_cloudtrail:0000199:f7a2cbbc-1ac9-466b-ba72-342e90d8c69b", "row_index": 199, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7a2cbbc-1ac9-466b-ba72-342e90d8c69b", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bd0a32e-ae48-4094-8b43-fba6d3b2c2e8", "record_id": "flaws_cloudtrail:0000200:2bd0a32e-ae48-4094-8b43-fba6d3b2c2e8", "row_index": 200, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bd0a32e-ae48-4094-8b43-fba6d3b2c2e8", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e873e21b-99ef-46f0-a189-4dc543f503490", "record_id": "flaws_cloudtrail:0000201:e873e21b-99ef-46f0-a189-4dc543f503490", "row_index": 201, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e873e21b-99ef-46f0-a189-4dc543f503490", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b922b92a-5df7-474e-9bb8-b54b21788c9a", "record_id": "flaws_cloudtrail:0000202:b922b92a-5df7-474e-9bb8-b54b21788c9a", "row_index": 202, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b922b92a-5df7-474e-9bb8-b54b21788c9a", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9978ceb3-407d-462e-aea0-2324cb1caf25", "record_id": "flaws_cloudtrail:0000203:9978ceb3-407d-462e-aea0-2324cb1caf25", "row_index": 203, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9978ceb3-407d-462e-aea0-2324cb1caf25", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0591fbc9-eea9-420a-9d19-faced169665", "record_id": "flaws_cloudtrail:0000204:0591fbc9-eea9-420a-9d19-faced169665", "row_index": 204, "timestamp": "2019-08-16T08:51:11Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0591fbc9-eea9-420a-9d19-faced169665", "eventTime": "2019-08-16T08:51:11Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16fbff01-8368-4fe7-a3f6-b7bbd7832b34", "record_id": "flaws_cloudtrail:0000205:16fbff01-8368-4fe7-a3f6-b7bbd7832b34", "row_index": 205, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16fbff01-8368-4fe7-a3f6-b7bbd7832b34", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3ffbe7-ced2-4ad4-9b00-e743e21be979", "record_id": "flaws_cloudtrail:0000206:fa3ffbe7-ced2-4ad4-9b00-e743e21be979", "row_index": 206, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3ffbe7-ced2-4ad4-9b00-e743e21be979", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d16f840f-5f2c-48bb-a871-6b78dcd93281", "record_id": "flaws_cloudtrail:0000207:d16f840f-5f2c-48bb-a871-6b78dcd93281", "row_index": 207, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d16f840f-5f2c-48bb-a871-6b78dcd93281", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09484f-fced-47f3-8cd1-dd0f1bfde248", "record_id": "flaws_cloudtrail:0000208:09484f-fced-47f3-8cd1-dd0f1bfde248", "row_index": 208, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09484f-fced-47f3-8cd1-dd0f1bfde248", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "529acddd-a749-4c84-98a3-9ccc97da2178", "record_id": "flaws_cloudtrail:0000209:529acddd-a749-4c84-98a3-9ccc97da2178", "row_index": 209, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "529acddd-a749-4c84-98a3-9ccc97da2178", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7a2cbbc-1ac9-466b-ba72-342e90d8c69b", "record_id": "flaws_cloudtrail:0000210:f7a2cbbc-1ac9-466b-ba72-342e90d8c69b", "row_index": 210, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7a2cbbc-1ac9-466b-ba72-342e90d8c69b", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bd0a32e-ae48-4094-8b43-fba6d3b2c2e8", "record_id": "flaws_cloudtrail:0000211:2bd0a32e-ae48-4094-8b43-fba6d3b2c2e8", "row_index": 211, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bd0a32e-ae48-4094-8b43-fba6d3b2c2e8", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e873e21b-99ef-46f0-a189-4dc543f503490", "record_id": "flaws_cloudtrail:0000212:e873e21b-99ef-46f0-a189-4dc543f503490", "row_index": 212, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e873e21b-99ef-46f0-a189-4dc543f503490", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b922b92a-5df7-474e-9bb8-b54b21788c9a", "record_id": "flaws_cloudtrail:0000213:b922b92a-5df7-474e-9bb8-b54b21788c9a", "row_index": 213, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b922b92a-5df7-474e-9bb8-b54b21788c9a", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9978ceb3-407d-462e-aea0-2324cb1caf25", "record_id": "flaws_cloudtrail:0000214:9978ceb3-407d-462e-aea0-2324cb1caf25", "row_index": 214, "timestamp": "2019-08-16T08:51:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9978ceb3-407d-462e-aea0-2324cb1caf25", "eventTime": "2019-08-16T08:51:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390efc9a-af6b-4c36-8a6b-fddfe8f71ab5", "record_id": "flaws_cloudtrail:0000215:390efc9a-af6b-4c36-8a6b-fddfe8f71ab5", "row_index": 215, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390efc9a-af6b-4c36-8a6b-fddfe8f71ab5", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9674f80a-10ff-4d48-9570-af301f6ba5e4", "record_id": "flaws_cloudtrail:0000216:9674f80a-10ff-4d48-9570-af301f6ba5e4", "row_index": 216, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9674f80a-10ff-4d48-9570-af301f6ba5e4", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7185c2e3-76a8-4de5-8d69-0ad954057e175", "record_id": "flaws_cloudtrail:0000217:7185c2e3-76a8-4de5-8d69-0ad954057e175", "row_index": 217, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7185c2e3-76a8-4de5-8d69-0ad954057e175", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaab0fa-7967-4581-8faa-3ea1fba61595", "record_id": "flaws_cloudtrail:0000218:fdaab0fa-7967-4581-8faa-3ea1fba61595", "row_index": 218, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaab0fa-7967-4581-8faa-3ea1fba61595", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "707d0bcf-efad-4cfe-9b40-2dd7d25df955", "record_id": "flaws_cloudtrail:0000219:707d0bcf-efad-4cfe-9b40-2dd7d25df955", "row_index": 219, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "707d0bcf-efad-4cfe-9b40-2dd7d25df955", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e88476-cb8d-4107-a1a7-605ba77555f", "record_id": "flaws_cloudtrail:0000220:f0e88476-cb8d-4107-a1a7-605ba77555f", "row_index": 220, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e88476-cb8d-4107-a1a7-605ba77555f", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bfd8eb6-ec2b-446c-8551-9f028df31382", "record_id": "flaws_cloudtrail:0000221:2bfd8eb6-ec2b-446c-8551-9f028df31382", "row_index": 221, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bfd8eb6-ec2b-446c-8551-9f028df31382", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484bbcdc-9234-4cb6-9ec8-f8eb0bedeb47", "record_id": "flaws_cloudtrail:0000222:484bbcdc-9234-4cb6-9ec8-f8eb0bedeb47", "row_index": 222, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484bbcdc-9234-4cb6-9ec8-f8eb0bedeb47", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a24927f-4b44-4e38-9d0c-2f2bad5be178", "record_id": "flaws_cloudtrail:0000223:a24927f-4b44-4e38-9d0c-2f2bad5be178", "row_index": 223, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a24927f-4b44-4e38-9d0c-2f2bad5be178", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e5912d3-a9fe-418d-a086-75c91e6eb341", "record_id": "flaws_cloudtrail:0000224:8e5912d3-a9fe-418d-a086-75c91e6eb341", "row_index": 224, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 947, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e5912d3-a9fe-418d-a086-75c91e6eb341", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cefd69b4-c808-4367-9323-70c5e08a2f2b", "record_id": "flaws_cloudtrail:0000225:cefd69b4-c808-4367-9323-70c5e08a2f2b", "row_index": 225, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cefd69b4-c808-4367-9323-70c5e08a2f2b", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb79dccb-d23a-4605-b4c4-8e5913b4c267", "record_id": "flaws_cloudtrail:0000226:cb79dccb-d23a-4605-b4c4-8e5913b4c267", "row_index": 226, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb79dccb-d23a-4605-b4c4-8e5913b4c267", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071f2414-0fa7-4b82-a0de-89d193e93326", "record_id": "flaws_cloudtrail:0000227:071f2414-0fa7-4b82-a0de-89d193e93326", "row_index": 227, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071f2414-0fa7-4b82-a0de-89d193e93326", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45e98a41-d456-4a14-bc94-52fb4fc9100e", "record_id": "flaws_cloudtrail:0000228:45e98a41-d456-4a14-bc94-52fb4fc9100e", "row_index": 228, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45e98a41-d456-4a14-bc94-52fb4fc9100e", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "240f7019-a490-4e56-b779-ca8b8b505c75", "record_id": "flaws_cloudtrail:0000229:240f7019-a490-4e56-b779-ca8b8b505c75", "row_index": 229, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "240f7019-a490-4e56-b779-ca8b8b505c75", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390efc9a-af6b-4c36-8a6b-fddfe8f71ab5", "record_id": "flaws_cloudtrail:0000230:390efc9a-af6b-4c36-8a6b-fddfe8f71ab5", "row_index": 230, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390efc9a-af6b-4c36-8a6b-fddfe8f71ab5", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9674f80a-10ff-4d48-9570-af301f6ba5e4", "record_id": "flaws_cloudtrail:0000231:9674f80a-10ff-4d48-9570-af301f6ba5e4", "row_index": 231, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9674f80a-10ff-4d48-9570-af301f6ba5e4", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7185c2e3-76a8-4de5-8d69-0ad954057e175", "record_id": "flaws_cloudtrail:0000232:7185c2e3-76a8-4de5-8d69-0ad954057e175", "row_index": 232, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7185c2e3-76a8-4de5-8d69-0ad954057e175", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaab0fa-7967-4581-8faa-3ea1fba61595", "record_id": "flaws_cloudtrail:0000233:fdaab0fa-7967-4581-8faa-3ea1fba61595", "row_index": 233, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaab0fa-7967-4581-8faa-3ea1fba61595", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "707d0bcf-efad-4cfe-9b40-2dd7d25df955", "record_id": "flaws_cloudtrail:0000234:707d0bcf-efad-4cfe-9b40-2dd7d25df955", "row_index": 234, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 917, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "707d0bcf-efad-4cfe-9b40-2dd7d25df955", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e88476-cb8d-4107-a1a7-605ba77555f", "record_id": "flaws_cloudtrail:0000235:f0e88476-cb8d-4107-a1a7-605ba77555f", "row_index": 235, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e88476-cb8d-4107-a1a7-605ba77555f", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bfd8eb6-ec2b-446c-8551-9f028df31382", "record_id": "flaws_cloudtrail:0000236:2bfd8eb6-ec2b-446c-8551-9f028df31382", "row_index": 236, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bfd8eb6-ec2b-446c-8551-9f028df31382", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484bbcdc-9234-4cb6-9ec8-f8eb0bedeb47", "record_id": "flaws_cloudtrail:0000237:484bbcdc-9234-4cb6-9ec8-f8eb0bedeb47", "row_index": 237, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484bbcdc-9234-4cb6-9ec8-f8eb0bedeb47", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a24927f-4b44-4e38-9d0c-2f2bad5be178", "record_id": "flaws_cloudtrail:0000238:a24927f-4b44-4e38-9d0c-2f2bad5be178", "row_index": 238, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a24927f-4b44-4e38-9d0c-2f2bad5be178", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e5912d3-a9fe-418d-a086-75c91e6eb341", "record_id": "flaws_cloudtrail:0000239:8e5912d3-a9fe-418d-a086-75c91e6eb341", "row_index": 239, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 947, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e5912d3-a9fe-418d-a086-75c91e6eb341", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cefd69b4-c808-4367-9323-70c5e08a2f2b", "record_id": "flaws_cloudtrail:0000240:cefd69b4-c808-4367-9323-70c5e08a2f2b", "row_index": 240, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cefd69b4-c808-4367-9323-70c5e08a2f2b", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb79dccb-d23a-4605-b4c4-8e5913b4c267", "record_id": "flaws_cloudtrail:0000241:cb79dccb-d23a-4605-b4c4-8e5913b4c267", "row_index": 241, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb79dccb-d23a-4605-b4c4-8e5913b4c267", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071f2414-0fa7-4b82-a0de-89d193e93326", "record_id": "flaws_cloudtrail:0000242:071f2414-0fa7-4b82-a0de-89d193e93326", "row_index": 242, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071f2414-0fa7-4b82-a0de-89d193e93326", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45e98a41-d456-4a14-bc94-52fb4fc9100e", "record_id": "flaws_cloudtrail:0000243:45e98a41-d456-4a14-bc94-52fb4fc9100e", "row_index": 243, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45e98a41-d456-4a14-bc94-52fb4fc9100e", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "240f7019-a490-4e56-b779-ca8b8b505c75", "record_id": "flaws_cloudtrail:0000244:240f7019-a490-4e56-b779-ca8b8b505c75", "row_index": 244, "timestamp": "2019-08-16T08:51:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "240f7019-a490-4e56-b779-ca8b8b505c75", "eventTime": "2019-08-16T08:51:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "348135efc-de96-45c5-bdcc-9ac176b2f97a", "record_id": "flaws_cloudtrail:0000245:348135efc-de96-45c5-bdcc-9ac176b2f97a", "row_index": 245, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "348135efc-de96-45c5-bdcc-9ac176b2f97a", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf1acfde-5774-45b4-a010-0b5b8c3a695f", "record_id": "flaws_cloudtrail:0000246:cf1acfde-5774-45b4-a010-0b5b8c3a695f", "row_index": 246, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf1acfde-5774-45b4-a010-0b5b8c3a695f", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605cf9d6-7090-4547-b31f-9f2961e2af50", "record_id": "flaws_cloudtrail:0000247:605cf9d6-7090-4547-b31f-9f2961e2af50", "row_index": 247, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605cf9d6-7090-4547-b31f-9f2961e2af50", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fc33744-1ef1-4d1d-8d43-1b2d94a1bcea", "record_id": "flaws_cloudtrail:0000248:1fc33744-1ef1-4d1d-8d43-1b2d94a1bcea", "row_index": 248, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fc33744-1ef1-4d1d-8d43-1b2d94a1bcea", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b868a84b-99d5-4d3c-89b1-697efdb09374", "record_id": "flaws_cloudtrail:0000249:b868a84b-99d5-4d3c-89b1-697efdb09374", "row_index": 249, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b868a84b-99d5-4d3c-89b1-697efdb09374", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "887e1bfa-36ee-4f23-a82f-bac2cc54eeed", "record_id": "flaws_cloudtrail:0000250:887e1bfa-36ee-4f23-a82f-bac2cc54eeed", "row_index": 250, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "887e1bfa-36ee-4f23-a82f-bac2cc54eeed", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2d8c32-c36a-493b-a168-dc4bb850014a3", "record_id": "flaws_cloudtrail:0000251:cc2d8c32-c36a-493b-a168-dc4bb850014a3", "row_index": 251, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2d8c32-c36a-493b-a168-dc4bb850014a3", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9528de74-a4d7-492a-bfc4-ec49c006016a", "record_id": "flaws_cloudtrail:0000252:9528de74-a4d7-492a-bfc4-ec49c006016a", "row_index": 252, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9528de74-a4d7-492a-bfc4-ec49c006016a", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4511ccde-8413-4305-9662-e4f037847d25e", "record_id": "flaws_cloudtrail:0000253:4511ccde-8413-4305-9662-e4f037847d25e", "row_index": 253, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4511ccde-8413-4305-9662-e4f037847d25e", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd1e73fc-cda3-4a2e-b7c5-872ef512a165", "record_id": "flaws_cloudtrail:0000254:bd1e73fc-cda3-4a2e-b7c5-872ef512a165", "row_index": 254, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd1e73fc-cda3-4a2e-b7c5-872ef512a165", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b8e69e6-f16c-4d39-9417-7ad479aa3187", "record_id": "flaws_cloudtrail:0000255:3b8e69e6-f16c-4d39-9417-7ad479aa3187", "row_index": 255, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b8e69e6-f16c-4d39-9417-7ad479aa3187", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98127a1b-c18e-446a-9d6c-7775f658e740", "record_id": "flaws_cloudtrail:0000256:98127a1b-c18e-446a-9d6c-7775f658e740", "row_index": 256, "timestamp": "2019-08-16T08:51:13Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98127a1b-c18e-446a-9d6c-7775f658e740", "eventTime": "2019-08-16T08:51:13Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24adeb8e-8356-4d15-bb41-60d695275e2", "record_id": "flaws_cloudtrail:0000257:24adeb8e-8356-4d15-bb41-60d695275e2", "row_index": 257, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24adeb8e-8356-4d15-bb41-60d695275e2", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37878b-dea5-4e20-af25-6ed8e494b834", "record_id": "flaws_cloudtrail:0000258:37878b-dea5-4e20-af25-6ed8e494b834", "row_index": 258, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37878b-dea5-4e20-af25-6ed8e494b834", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b213224b5-a0e5-440c-ad23-4dd4eb206a16", "record_id": "flaws_cloudtrail:0000259:b213224b5-a0e5-440c-ad23-4dd4eb206a16", "row_index": 259, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b213224b5-a0e5-440c-ad23-4dd4eb206a16", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77817c73-a41b-413d-8248-1bb3fb95ebe1", "record_id": "flaws_cloudtrail:0000260:77817c73-a41b-413d-8248-1bb3fb95ebe1", "row_index": 260, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77817c73-a41b-413d-8248-1bb3fb95ebe1", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535ddc2d-5a55-454b-83a3-7f46dc0c2255", "record_id": "flaws_cloudtrail:0000261:535ddc2d-5a55-454b-83a3-7f46dc0c2255", "row_index": 261, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535ddc2d-5a55-454b-83a3-7f46dc0c2255", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44efec67-13f8-4699-b94d-1d42b7d7934a", "record_id": "flaws_cloudtrail:0000262:44efec67-13f8-4699-b94d-1d42b7d7934a", "row_index": 262, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44efec67-13f8-4699-b94d-1d42b7d7934a", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2330ada-3ab9-413e-a4a6-a411294e37c", "record_id": "flaws_cloudtrail:0000263:e2330ada-3ab9-413e-a4a6-a411294e37c", "row_index": 263, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2330ada-3ab9-413e-a4a6-a411294e37c", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33724e2-1530-4907-b9ba-731b4d6c4c19", "record_id": "flaws_cloudtrail:0000264:33724e2-1530-4907-b9ba-731b4d6c4c19", "row_index": 264, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33724e2-1530-4907-b9ba-731b4d6c4c19", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "348135efc-de96-45c5-bdcc-9ac176b2f97a", "record_id": "flaws_cloudtrail:0000265:348135efc-de96-45c5-bdcc-9ac176b2f97a", "row_index": 265, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "348135efc-de96-45c5-bdcc-9ac176b2f97a", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf1acfde-5774-45b4-a010-0b5b8c3a695f", "record_id": "flaws_cloudtrail:0000266:cf1acfde-5774-45b4-a010-0b5b8c3a695f", "row_index": 266, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf1acfde-5774-45b4-a010-0b5b8c3a695f", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605cf9d6-7090-4547-b31f-9f2961e2af50", "record_id": "flaws_cloudtrail:0000267:605cf9d6-7090-4547-b31f-9f2961e2af50", "row_index": 267, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605cf9d6-7090-4547-b31f-9f2961e2af50", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fc33744-1ef1-4d1d-8d43-1b2d94a1bcea", "record_id": "flaws_cloudtrail:0000268:1fc33744-1ef1-4d1d-8d43-1b2d94a1bcea", "row_index": 268, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fc33744-1ef1-4d1d-8d43-1b2d94a1bcea", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b868a84b-99d5-4d3c-89b1-697efdb09374", "record_id": "flaws_cloudtrail:0000269:b868a84b-99d5-4d3c-89b1-697efdb09374", "row_index": 269, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 952, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b868a84b-99d5-4d3c-89b1-697efdb09374", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "887e1bfa-36ee-4f23-a82f-bac2cc54eeed", "record_id": "flaws_cloudtrail:0000270:887e1bfa-36ee-4f23-a82f-bac2cc54eeed", "row_index": 270, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "887e1bfa-36ee-4f23-a82f-bac2cc54eeed", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2d8c32-c36a-493b-a168-dc4bb850014a3", "record_id": "flaws_cloudtrail:0000271:cc2d8c32-c36a-493b-a168-dc4bb850014a3", "row_index": 271, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2d8c32-c36a-493b-a168-dc4bb850014a3", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9528de74-a4d7-492a-bfc4-ec49c006016a", "record_id": "flaws_cloudtrail:0000272:9528de74-a4d7-492a-bfc4-ec49c006016a", "row_index": 272, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9528de74-a4d7-492a-bfc4-ec49c006016a", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4511ccde-8413-4305-9662-e4f037847d25e", "record_id": "flaws_cloudtrail:0000273:4511ccde-8413-4305-9662-e4f037847d25e", "row_index": 273, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4511ccde-8413-4305-9662-e4f037847d25e", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd1e73fc-cda3-4a2e-b7c5-872ef512a165", "record_id": "flaws_cloudtrail:0000274:bd1e73fc-cda3-4a2e-b7c5-872ef512a165", "row_index": 274, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd1e73fc-cda3-4a2e-b7c5-872ef512a165", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b8e69e6-f16c-4d39-9417-7ad479aa3187", "record_id": "flaws_cloudtrail:0000275:3b8e69e6-f16c-4d39-9417-7ad479aa3187", "row_index": 275, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b8e69e6-f16c-4d39-9417-7ad479aa3187", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98127a1b-c18e-446a-9d6c-7775f658e740", "record_id": "flaws_cloudtrail:0000276:98127a1b-c18e-446a-9d6c-7775f658e740", "row_index": 276, "timestamp": "2019-08-16T08:51:13Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98127a1b-c18e-446a-9d6c-7775f658e740", "eventTime": "2019-08-16T08:51:13Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24adeb8e-8356-4d15-bb41-60d695275e2", "record_id": "flaws_cloudtrail:0000277:24adeb8e-8356-4d15-bb41-60d695275e2", "row_index": 277, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24adeb8e-8356-4d15-bb41-60d695275e2", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37878b-dea5-4e20-af25-6ed8e494b834", "record_id": "flaws_cloudtrail:0000278:37878b-dea5-4e20-af25-6ed8e494b834", "row_index": 278, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37878b-dea5-4e20-af25-6ed8e494b834", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b213224b5-a0e5-440c-ad23-4dd4eb206a16", "record_id": "flaws_cloudtrail:0000279:b213224b5-a0e5-440c-ad23-4dd4eb206a16", "row_index": 279, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b213224b5-a0e5-440c-ad23-4dd4eb206a16", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77817c73-a41b-413d-8248-1bb3fb95ebe1", "record_id": "flaws_cloudtrail:0000280:77817c73-a41b-413d-8248-1bb3fb95ebe1", "row_index": 280, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77817c73-a41b-413d-8248-1bb3fb95ebe1", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535ddc2d-5a55-454b-83a3-7f46dc0c2255", "record_id": "flaws_cloudtrail:0000281:535ddc2d-5a55-454b-83a3-7f46dc0c2255", "row_index": 281, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535ddc2d-5a55-454b-83a3-7f46dc0c2255", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44efec67-13f8-4699-b94d-1d42b7d7934a", "record_id": "flaws_cloudtrail:0000282:44efec67-13f8-4699-b94d-1d42b7d7934a", "row_index": 282, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44efec67-13f8-4699-b94d-1d42b7d7934a", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2330ada-3ab9-413e-a4a6-a411294e37c", "record_id": "flaws_cloudtrail:0000283:e2330ada-3ab9-413e-a4a6-a411294e37c", "row_index": 283, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2330ada-3ab9-413e-a4a6-a411294e37c", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33724e2-1530-4907-b9ba-731b4d6c4c19", "record_id": "flaws_cloudtrail:0000284:33724e2-1530-4907-b9ba-731b4d6c4c19", "row_index": 284, "timestamp": "2019-08-16T08:51:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33724e2-1530-4907-b9ba-731b4d6c4c19", "eventTime": "2019-08-16T08:51:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad12e8b-65e7-48ea-8713-a480d000a28a", "record_id": "flaws_cloudtrail:0000285:0ad12e8b-65e7-48ea-8713-a480d000a28a", "row_index": 285, "timestamp": "2019-08-16T08:51:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad12e8b-65e7-48ea-8713-a480d000a28a", "eventTime": "2019-08-16T08:51:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81af9a5-f5f9-4ad8-b646-be2dd757f489", "record_id": "flaws_cloudtrail:0000286:f81af9a5-f5f9-4ad8-b646-be2dd757f489", "row_index": 286, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81af9a5-f5f9-4ad8-b646-be2dd757f489", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547b22b5-6047-4fd3-82cc-37b23ccd7ece", "record_id": "flaws_cloudtrail:0000287:547b22b5-6047-4fd3-82cc-37b23ccd7ece", "row_index": 287, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547b22b5-6047-4fd3-82cc-37b23ccd7ece", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c393ae6f-ead3-4459-9e96-0f87d6124f7c", "record_id": "flaws_cloudtrail:0000288:c393ae6f-ead3-4459-9e96-0f87d6124f7c", "row_index": 288, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c393ae6f-ead3-4459-9e96-0f87d6124f7c", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b405152aa-d54d-4013-9642-25e5829a88e3", "record_id": "flaws_cloudtrail:0000289:b405152aa-d54d-4013-9642-25e5829a88e3", "row_index": 289, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b405152aa-d54d-4013-9642-25e5829a88e3", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb169941-0d6f-4ba4-b6f3-9bd9db914bac", "record_id": "flaws_cloudtrail:0000290:eb169941-0d6f-4ba4-b6f3-9bd9db914bac", "row_index": 290, "timestamp": "2019-08-16T08:51:14Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb169941-0d6f-4ba4-b6f3-9bd9db914bac", "eventTime": "2019-08-16T08:51:14Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad12e8b-65e7-48ea-8713-a480d000a28a", "record_id": "flaws_cloudtrail:0000291:0ad12e8b-65e7-48ea-8713-a480d000a28a", "row_index": 291, "timestamp": "2019-08-16T08:51:14Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad12e8b-65e7-48ea-8713-a480d000a28a", "eventTime": "2019-08-16T08:51:14Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81af9a5-f5f9-4ad8-b646-be2dd757f489", "record_id": "flaws_cloudtrail:0000292:f81af9a5-f5f9-4ad8-b646-be2dd757f489", "row_index": 292, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 954, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81af9a5-f5f9-4ad8-b646-be2dd757f489", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547b22b5-6047-4fd3-82cc-37b23ccd7ece", "record_id": "flaws_cloudtrail:0000293:547b22b5-6047-4fd3-82cc-37b23ccd7ece", "row_index": 293, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547b22b5-6047-4fd3-82cc-37b23ccd7ece", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c393ae6f-ead3-4459-9e96-0f87d6124f7c", "record_id": "flaws_cloudtrail:0000294:c393ae6f-ead3-4459-9e96-0f87d6124f7c", "row_index": 294, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c393ae6f-ead3-4459-9e96-0f87d6124f7c", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b405152aa-d54d-4013-9642-25e5829a88e3", "record_id": "flaws_cloudtrail:0000295:b405152aa-d54d-4013-9642-25e5829a88e3", "row_index": 295, "timestamp": "2019-08-16T08:51:14Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b405152aa-d54d-4013-9642-25e5829a88e3", "eventTime": "2019-08-16T08:51:14Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"encryption": [""], "host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb169941-0d6f-4ba4-b6f3-9bd9db914bac", "record_id": "flaws_cloudtrail:0000296:eb169941-0d6f-4ba4-b6f3-9bd9db914bac", "row_index": 296, "timestamp": "2019-08-16T08:51:14Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb169941-0d6f-4ba4-b6f3-9bd9db914bac", "eventTime": "2019-08-16T08:51:14Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be161350-26e8-4df4-85c8-b67b841f6956", "record_id": "flaws_cloudtrail:0000297:be161350-26e8-4df4-85c8-b67b841f6956", "row_index": 297, "timestamp": "2019-08-16T08:51:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 961, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be161350-26e8-4df4-85c8-b67b841f6956", "eventTime": "2019-08-16T08:51:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be161350-26e8-4df4-85c8-b67b841f6956", "record_id": "flaws_cloudtrail:0000298:be161350-26e8-4df4-85c8-b67b841f6956", "row_index": 298, "timestamp": "2019-08-16T08:51:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 961, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be161350-26e8-4df4-85c8-b67b841f6956", "eventTime": "2019-08-16T08:51:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71e94cfd-0a32-4694-855c-4095a7c971e0", "record_id": "flaws_cloudtrail:0000299:71e94cfd-0a32-4694-855c-4095a7c971e0", "row_index": 299, "timestamp": "2019-08-16T08:51:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71e94cfd-0a32-4694-855c-4095a7c971e0", "eventTime": "2019-08-16T08:51:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71e94cfd-0a32-4694-855c-4095a7c971e0", "record_id": "flaws_cloudtrail:0000300:71e94cfd-0a32-4694-855c-4095a7c971e0", "row_index": 300, "timestamp": "2019-08-16T08:51:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71e94cfd-0a32-4694-855c-4095a7c971e0", "eventTime": "2019-08-16T08:51:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea1bdac-b9d7-49c8-9950-4636aa65f646", "record_id": "flaws_cloudtrail:0000301:fea1bdac-b9d7-49c8-9950-4636aa65f646", "row_index": 301, "timestamp": "2019-08-16T08:51:34Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea1bdac-b9d7-49c8-9950-4636aa65f646", "eventTime": "2019-08-16T08:51:34Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea1bdac-b9d7-49c8-9950-4636aa65f646", "record_id": "flaws_cloudtrail:0000302:fea1bdac-b9d7-49c8-9950-4636aa65f646", "row_index": 302, "timestamp": "2019-08-16T08:51:34Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea1bdac-b9d7-49c8-9950-4636aa65f646", "eventTime": "2019-08-16T08:51:34Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d1de88b-aec6-41a5-b24b-938334b2fcfc", "record_id": "flaws_cloudtrail:0000303:5d1de88b-aec6-41a5-b24b-938334b2fcfc", "row_index": 303, "timestamp": "2019-08-16T08:52:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d1de88b-aec6-41a5-b24b-938334b2fcfc", "eventTime": "2019-08-16T08:52:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d1de88b-aec6-41a5-b24b-938334b2fcfc", "record_id": "flaws_cloudtrail:0000304:5d1de88b-aec6-41a5-b24b-938334b2fcfc", "row_index": 304, "timestamp": "2019-08-16T08:52:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d1de88b-aec6-41a5-b24b-938334b2fcfc", "eventTime": "2019-08-16T08:52:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.9.209 Python/3.7.3 Linux/4.12.0-kali2-686 Botocore/1.12.209", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66b20ecc-d047-4b4e-990b-a2c13df160b1", "record_id": "flaws_cloudtrail:0000305:66b20ecc-d047-4b4e-990b-a2c13df160b1", "row_index": 305, "timestamp": "2019-08-16T08:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66b20ecc-d047-4b4e-990b-a2c13df160b1", "eventTime": "2019-08-16T08:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9GMNGOFVNCHGKJ45", "expiration": "Aug 16, 2019 3:16:15 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66b20ecc-d047-4b4e-990b-a2c13df160b1", "record_id": "flaws_cloudtrail:0000306:66b20ecc-d047-4b4e-990b-a2c13df160b1", "row_index": 306, "timestamp": "2019-08-16T08:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66b20ecc-d047-4b4e-990b-a2c13df160b1", "eventTime": "2019-08-16T08:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9GMNGOFVNCHGKJ45", "expiration": "Aug 16, 2019 3:16:15 PM", "sessionToken": "AgoJb3JpZ2luX2VjEKn//////////wEaCXVzLXdlc3QtMiJHMEUCIQCCi4pdzBMavL+SxtxF8ZOh7XVXSL+qkyyIgu/ltXPBNgIgfw8Ho7s8yMtJoiMrARI1v0RrIGHlN+YJsj21NHz0l5Mq2gMIQhAAGgw5NzU0MjYyNjIwMjkiDBXU4z7fXzspqIvy1yq3A+XtLl3oMJa2rn2n9ftZtUwbQhVGXDQ+DKQ/fW3FRbmR3v792+pTaa7ROK7cDZ/NQ+KEUtp+kvM8/tHsyoqi2e96yRdErhBLtJb/RHfaXulI0jVQCJthsImwKOoiaxbeMTkfpqh/oJNvxglng4DLUaFbW1zDIJINg7U5DutqtYL0Bs40lnKywVbpjXPia0EQMlGpiM0Ho2SLePqgb2rwjwAadGAA2Wu1hKsiSl+Chlg6GGpUX+u+qVJDd5g2fliSWBR6hsXntA1qCRjXaOD4jZi9A/5+z5KClQcDAjhKltj2MBvx2XVqMKIyz+3IhjIvqvQOIAgDJnXpPDYDWOuZ1wfQGUitvdCvbM4ngIs1jgsXP+MhYtz7qyVw8HtvlOaKkPculNUsMqVuwyz9Ao6JlGYFk6q+AhJNpTV2v7vMKHQi9UWWv9ZD/RetoY8xpkve4kV4b9iON3bPSS1FhuePPds11jYEcNiNz61WEwZ++v+xGGy3k9N5HtwjbDlWn8DiXku0ydDTxwzWaXjAPqKoCQt7OP3EmSII/wpjA7RXnRl7Figx2D1qJrs10DJgl/sdsvD6qg5LF8cw89/Z6gU6tAGmPFjTeFrvrnyeByYN3LVDs6s2755GdxZ1rHtAt75ef7Spy8AR9nBmcuDDI7z+eEAHpLwa3PNUAjsA4Gt1/kz1FDYH5UrVhorIKbkXTso+nqO+/p3EQhN+k0Jnci/KclzDcxcClndaVj8G+oYXBGBRS5tA32UOCzSHEyM3o078DCCb4Ix77F5v0e6MtJGN6xZRCaXGBuMMafo0lW8zGrTUUtSQHH+pZtIhGFljkrZm+uSf90U="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa2532e9-df83-4134-a179-ec23e839878e", "record_id": "flaws_cloudtrail:0000307:fa2532e9-df83-4134-a179-ec23e839878e", "row_index": 307, "timestamp": "2019-08-16T09:26:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa2532e9-df83-4134-a179-ec23e839878e", "eventTime": "2019-08-16T09:26:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa2532e9-df83-4134-a179-ec23e839878e", "record_id": "flaws_cloudtrail:0000308:fa2532e9-df83-4134-a179-ec23e839878e", "row_index": 308, "timestamp": "2019-08-16T09:26:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa2532e9-df83-4134-a179-ec23e839878e", "eventTime": "2019-08-16T09:26:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f790ae3-eeb8-4196-b655-3cb1d6ae3082", "record_id": "flaws_cloudtrail:0000309:0f790ae3-eeb8-4196-b655-3cb1d6ae3082", "row_index": 309, "timestamp": "2019-08-16T09:26:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f790ae3-eeb8-4196-b655-3cb1d6ae3082", "eventTime": "2019-08-16T09:26:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f790ae3-eeb8-4196-b655-3cb1d6ae3082", "record_id": "flaws_cloudtrail:0000310:0f790ae3-eeb8-4196-b655-3cb1d6ae3082", "row_index": 310, "timestamp": "2019-08-16T09:26:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f790ae3-eeb8-4196-b655-3cb1d6ae3082", "eventTime": "2019-08-16T09:26:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aadcc28-4419-45f9-883e-9e8c8853c1f8", "record_id": "flaws_cloudtrail:0000311:4aadcc28-4419-45f9-883e-9e8c8853c1f8", "row_index": 311, "timestamp": "2019-08-16T09:26:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAUUA7D2TDNDHGIELU", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aadcc28-4419-45f9-883e-9e8c8853c1f8", "eventTime": "2019-08-16T09:26:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAUUA7D2TDNDHGIELU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-16T05:57:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aadcc28-4419-45f9-883e-9e8c8853c1f8", "record_id": "flaws_cloudtrail:0000312:4aadcc28-4419-45f9-883e-9e8c8853c1f8", "row_index": 312, "timestamp": "2019-08-16T09:26:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAUUA7D2TDNDHGIELU", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1155, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aadcc28-4419-45f9-883e-9e8c8853c1f8", "eventTime": "2019-08-16T09:26:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAUUA7D2TDNDHGIELU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-16T05:57:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb21b588-9cf4-443e-b9fd-ae73b075b553", "record_id": "flaws_cloudtrail:0000313:eb21b588-9cf4-443e-b9fd-ae73b075b553", "row_index": 313, "timestamp": "2019-08-16T09:39:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "aws-cli/1.16.219 Python/2.7.13 Linux/4.12.0-kali2-686 botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb21b588-9cf4-443e-b9fd-ae73b075b553", "eventTime": "2019-08-16T09:39:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "aws-cli/1.16.219 Python/2.7.13 Linux/4.12.0-kali2-686 botocore/1.12.209", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb21b588-9cf4-443e-b9fd-ae73b075b553", "record_id": "flaws_cloudtrail:0000314:eb21b588-9cf4-443e-b9fd-ae73b075b553", "row_index": 314, "timestamp": "2019-08-16T09:39:42Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "aws-cli/1.16.219 Python/2.7.13 Linux/4.12.0-kali2-686 botocore/1.12.209", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb21b588-9cf4-443e-b9fd-ae73b075b553", "eventTime": "2019-08-16T09:39:42Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "aws-cli/1.16.219 Python/2.7.13 Linux/4.12.0-kali2-686 botocore/1.12.209", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734957-4b69-42d1-8d71-f461491e8d1ec", "record_id": "flaws_cloudtrail:0000315:734957-4b69-42d1-8d71-f461491e8d1ec", "row_index": 315, "timestamp": "2019-08-16T09:39:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734957-4b69-42d1-8d71-f461491e8d1ec", "eventTime": "2019-08-16T09:39:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734957-4b69-42d1-8d71-f461491e8d1ec", "record_id": "flaws_cloudtrail:0000316:734957-4b69-42d1-8d71-f461491e8d1ec", "row_index": 316, "timestamp": "2019-08-16T09:39:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 920, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734957-4b69-42d1-8d71-f461491e8d1ec", "eventTime": "2019-08-16T09:39:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "130f2364-58bf-4e98-be50-71829e9dbf17", "record_id": "flaws_cloudtrail:0000317:130f2364-58bf-4e98-be50-71829e9dbf17", "row_index": 317, "timestamp": "2019-08-16T09:39:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "130f2364-58bf-4e98-be50-71829e9dbf17", "eventTime": "2019-08-16T09:39:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "130f2364-58bf-4e98-be50-71829e9dbf17", "record_id": "flaws_cloudtrail:0000318:130f2364-58bf-4e98-be50-71829e9dbf17", "row_index": 318, "timestamp": "2019-08-16T09:39:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "130f2364-58bf-4e98-be50-71829e9dbf17", "eventTime": "2019-08-16T09:39:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1d88d27-6deb-4c3d-a6d2-35f20e1d7ccf", "record_id": "flaws_cloudtrail:0000319:a1d88d27-6deb-4c3d-a6d2-35f20e1d7ccf", "row_index": 319, "timestamp": "2019-08-16T09:39:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1d88d27-6deb-4c3d-a6d2-35f20e1d7ccf", "eventTime": "2019-08-16T09:39:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1d88d27-6deb-4c3d-a6d2-35f20e1d7ccf", "record_id": "flaws_cloudtrail:0000320:a1d88d27-6deb-4c3d-a6d2-35f20e1d7ccf", "row_index": 320, "timestamp": "2019-08-16T09:39:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1d88d27-6deb-4c3d-a6d2-35f20e1d7ccf", "eventTime": "2019-08-16T09:39:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b1d7dcf-39c2-419e-b0c9-8ef2ec4f17c3", "record_id": "flaws_cloudtrail:0000321:7b1d7dcf-39c2-419e-b0c9-8ef2ec4f17c3", "row_index": 321, "timestamp": "2019-08-16T09:39:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b1d7dcf-39c2-419e-b0c9-8ef2ec4f17c3", "eventTime": "2019-08-16T09:39:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b1d7dcf-39c2-419e-b0c9-8ef2ec4f17c3", "record_id": "flaws_cloudtrail:0000322:7b1d7dcf-39c2-419e-b0c9-8ef2ec4f17c3", "row_index": 322, "timestamp": "2019-08-16T09:39:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b1d7dcf-39c2-419e-b0c9-8ef2ec4f17c3", "eventTime": "2019-08-16T09:39:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.9.209 Python/2.7.13 Linux/4.12.0-kali2-686 Botocore/1.12.209 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71eb2e74-db3b-41fd-83f0-06e199d66451", "record_id": "flaws_cloudtrail:0000323:71eb2e74-db3b-41fd-83f0-06e199d66451", "row_index": 323, "timestamp": "2019-08-16T09:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71eb2e74-db3b-41fd-83f0-06e199d66451", "eventTime": "2019-08-16T09:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5U8T4GD3N6WTJ78V", "expiration": "Aug 16, 2019 4:03:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71eb2e74-db3b-41fd-83f0-06e199d66451", "record_id": "flaws_cloudtrail:0000324:71eb2e74-db3b-41fd-83f0-06e199d66451", "row_index": 324, "timestamp": "2019-08-16T09:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71eb2e74-db3b-41fd-83f0-06e199d66451", "eventTime": "2019-08-16T09:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5U8T4GD3N6WTJ78V", "expiration": "Aug 16, 2019 4:03:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cfb268d-b5b3-4b30-b56a-48f4cf12e116", "record_id": "flaws_cloudtrail:0000325:7cfb268d-b5b3-4b30-b56a-48f4cf12e116", "row_index": 325, "timestamp": "2019-08-16T10:08:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ38BR9OMM0E42AKD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "73.55.13.134", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 503, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cfb268d-b5b3-4b30-b56a-48f4cf12e116", "eventTime": "2019-08-16T10:08:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "73.55.13.134", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ38BR9OMM0E42AKD", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fae167c-43a6-4975-90e8-c4785039ece0", "record_id": "flaws_cloudtrail:0000326:5fae167c-43a6-4975-90e8-c4785039ece0", "row_index": 326, "timestamp": "2019-08-16T10:09:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ38BR9OMM0E42AKD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "73.55.13.134", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 507, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fae167c-43a6-4975-90e8-c4785039ece0", "eventTime": "2019-08-16T10:09:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "73.55.13.134", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ38BR9OMM0E42AKD", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1680835-3418-412c-864e-6dd41d008039", "record_id": "flaws_cloudtrail:0000327:b1680835-3418-412c-864e-6dd41d008039", "row_index": 327, "timestamp": "2019-08-16T10:12:53Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ38BR9OMM0E42AKD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "73.55.13.134", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9828"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1680835-3418-412c-864e-6dd41d008039", "eventTime": "2019-08-16T10:12:53Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "73.55.13.134", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ38BR9OMM0E42AKD", "userName": "backup"}, "requestParameters": {"name": "trail-9828"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9828"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8ce42e8-7ec0-41da-a3b8-d470a0c711db", "record_id": "flaws_cloudtrail:0000328:b8ce42e8-7ec0-41da-a3b8-d470a0c711db", "row_index": 328, "timestamp": "2019-08-16T10:14:06Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ38BR9OMM0E42AKD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "73.55.13.134", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9828"], "raw_record_size_bytes": 629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8ce42e8-7ec0-41da-a3b8-d470a0c711db", "eventTime": "2019-08-16T10:14:06Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "73.55.13.134", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ38BR9OMM0E42AKD", "userName": "backup"}, "requestParameters": {"name": "trail-9828"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9828"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec1421cf-008d-4b1b-b906-3f5569e2f85d", "record_id": "flaws_cloudtrail:0000329:ec1421cf-008d-4b1b-b906-3f5569e2f85d", "row_index": 329, "timestamp": "2019-08-16T10:15:59Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ38BR9OMM0E42AKD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "73.55.13.134", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9828"], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec1421cf-008d-4b1b-b906-3f5569e2f85d", "eventTime": "2019-08-16T10:15:59Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "73.55.13.134", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ38BR9OMM0E42AKD", "userName": "backup"}, "requestParameters": {"name": "trail-9828", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9828"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2c3f59-826d-496d-b4f8-576e0aa431f5", "record_id": "flaws_cloudtrail:0000330:7e2c3f59-826d-496d-b4f8-576e0aa431f5", "row_index": 330, "timestamp": "2019-08-16T10:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1876, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2c3f59-826d-496d-b4f8-576e0aa431f5", "eventTime": "2019-08-16T10:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7C8FHEAWVA5LIS7C", "expiration": "Aug 16, 2019 5:06:30 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e2c3f59-826d-496d-b4f8-576e0aa431f5", "record_id": "flaws_cloudtrail:0000331:7e2c3f59-826d-496d-b4f8-576e0aa431f5", "row_index": 331, "timestamp": "2019-08-16T10:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1876, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e2c3f59-826d-496d-b4f8-576e0aa431f5", "eventTime": "2019-08-16T10:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7C8FHEAWVA5LIS7C", "expiration": "Aug 16, 2019 5:06:30 PM", "sessionToken": "AgoJb3JpZ2luX2VjEKv//////////wEaCXVzLXdlc3QtMiJIMEYCIQDw9U1SxqUrwMFvGS+7cGmaA4GEYpmKpHD/Zb3HuUHcCwIhALFLqCn42/MvjlFaRQhqU9PY0SHVPB2WAq1e1g6RJrJbKtoDCEQQABoMOTc1NDI2MjYyMDI5IgyfH9QDV4DM4FXSEAQqtwOIsNJrzGNpsAFSgkUSL8W9wGTZkFrQ4fNU9D8pu/ERkfH0kKWjpfTlloGPvbcwGcwCt8YW7NalVjtslubQ5kWNmz0gaTPIz+E6fOHE7nLSsNSaz6tQo4MSCnn5XjIC7m8a/2O81PkD+KAB1utNskzM7zqA4y1ZixUSezZ1TkGh88g+VpA79Wt6s3JYSAbwqlUWKHwUHB0kNgCQ2c5Dw4yHCZBkxNUhdtSY8QXwJ8taPTihxMmm88BsL58yWRfvXdEXnEd0RzpMkwYHGWWUl/ubAP/j3xeqCUqbtOWfZMqyLTfSnbVyJEulq06/P+JHk1qM5Q4jzpy+MiyojmTU37Scr/Aa8uGwioA6NQzcf2nx1y0bjzmEfn1fiZ3uVUmO6+380+5ffHVxsuh6UodynDqGHII/GZNBH5GUuEK66GEUrgpkojQZsmN63iGlLJGQIZlu5Y+IoOR4nx1W2sGrzD0jEI43OZFvAUw1Z2pudr2DNXNcPInC/3dKaHobD+auzzpIVKaA5PMwYk2WcOTup3OeEDkp6LRoI7Z6bMzBRqWI5uka09cjxOvbXEwtR86eoYSppBJxlsJWMJOY2uoFOrMB4qhNrvCPnn53cE7fVhd3Hk4gQnVm5WirfDjiuvcljTZoAXutdBqzMz1fLp7iPr3xvQEUigdHc9Vck8QZwF30ovIynkpnJGmTiYz7ZzDrG69+JUaWtgU9y1NNjXG0VmySVJr3VhaK3AV5cOOvWnzhpkvUsGLP6lB/2BjC/pHuGh4QAn56d+tOKvarfQwkdXl+lb7n85DxRRHCIwX3/EeEy75MUa91YzRwuXwNgt7KI5+55zM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db175c7-5e91-4648-beb9-e4751e4b10ed", "record_id": "flaws_cloudtrail:0000332:3db175c7-5e91-4648-beb9-e4751e4b10ed", "row_index": 332, "timestamp": "2019-08-16T11:35:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db175c7-5e91-4648-beb9-e4751e4b10ed", "eventTime": "2019-08-16T11:35:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db175c7-5e91-4648-beb9-e4751e4b10ed", "record_id": "flaws_cloudtrail:0000333:3db175c7-5e91-4648-beb9-e4751e4b10ed", "row_index": 333, "timestamp": "2019-08-16T11:35:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db175c7-5e91-4648-beb9-e4751e4b10ed", "eventTime": "2019-08-16T11:35:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f9ec7-e6ac-4f42-b576-30b858f9fe9a", "record_id": "flaws_cloudtrail:0000334:294f9ec7-e6ac-4f42-b576-30b858f9fe9a", "row_index": 334, "timestamp": "2019-08-16T11:36:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[aws-cli/1.16.219 Python/3.7.3 Linux/4.12.0-kali2-686 botocore/1.12.209]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f9ec7-e6ac-4f42-b576-30b858f9fe9a", "eventTime": "2019-08-16T11:36:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[aws-cli/1.16.219 Python/3.7.3 Linux/4.12.0-kali2-686 botocore/1.12.209]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f9ec7-e6ac-4f42-b576-30b858f9fe9a", "record_id": "flaws_cloudtrail:0000335:294f9ec7-e6ac-4f42-b576-30b858f9fe9a", "row_index": 335, "timestamp": "2019-08-16T11:36:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "[aws-cli/1.16.219 Python/3.7.3 Linux/4.12.0-kali2-686 botocore/1.12.209]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f9ec7-e6ac-4f42-b576-30b858f9fe9a", "eventTime": "2019-08-16T11:36:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "[aws-cli/1.16.219 Python/3.7.3 Linux/4.12.0-kali2-686 botocore/1.12.209]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.eu-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13b684cf-b14c-4d1d-82b5-77a204454f04a", "record_id": "flaws_cloudtrail:0000336:13b684cf-b14c-4d1d-82b5-77a204454f04a", "row_index": 336, "timestamp": "2019-08-16T11:44:07Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13b684cf-b14c-4d1d-82b5-77a204454f04a", "eventTime": "2019-08-16T11:44:07Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13b684cf-b14c-4d1d-82b5-77a204454f04a", "record_id": "flaws_cloudtrail:0000337:13b684cf-b14c-4d1d-82b5-77a204454f04a", "row_index": 337, "timestamp": "2019-08-16T11:44:07Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13b684cf-b14c-4d1d-82b5-77a204454f04a", "eventTime": "2019-08-16T11:44:07Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514de7a9-39f6-43e2-a81e-2f5e6c4ac1ea", "record_id": "flaws_cloudtrail:0000338:514de7a9-39f6-43e2-a81e-2f5e6c4ac1ea", "row_index": 338, "timestamp": "2019-08-16T11:44:19Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514de7a9-39f6-43e2-a81e-2f5e6c4ac1ea", "eventTime": "2019-08-16T11:44:19Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514de7a9-39f6-43e2-a81e-2f5e6c4ac1ea", "record_id": "flaws_cloudtrail:0000339:514de7a9-39f6-43e2-a81e-2f5e6c4ac1ea", "row_index": 339, "timestamp": "2019-08-16T11:44:19Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514de7a9-39f6-43e2-a81e-2f5e6c4ac1ea", "eventTime": "2019-08-16T11:44:19Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df286f7f-ca2a-463e-8753-260b78baef76", "record_id": "flaws_cloudtrail:0000340:df286f7f-ca2a-463e-8753-260b78baef76", "row_index": 340, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df286f7f-ca2a-463e-8753-260b78baef76", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aeef71b-6e76-4e5c-a9dc-f9f2110235e3", "record_id": "flaws_cloudtrail:0000341:9aeef71b-6e76-4e5c-a9dc-f9f2110235e3", "row_index": 341, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aeef71b-6e76-4e5c-a9dc-f9f2110235e3", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "421044-74de-4cc4-bdd3-0e7e5efb2a66", "record_id": "flaws_cloudtrail:0000342:421044-74de-4cc4-bdd3-0e7e5efb2a66", "row_index": 342, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "421044-74de-4cc4-bdd3-0e7e5efb2a66", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289fce13-f4a8-4f7d-97cd-ecd54c0be807", "record_id": "flaws_cloudtrail:0000343:289fce13-f4a8-4f7d-97cd-ecd54c0be807", "row_index": 343, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289fce13-f4a8-4f7d-97cd-ecd54c0be807", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df286f7f-ca2a-463e-8753-260b78baef76", "record_id": "flaws_cloudtrail:0000344:df286f7f-ca2a-463e-8753-260b78baef76", "row_index": 344, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df286f7f-ca2a-463e-8753-260b78baef76", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aeef71b-6e76-4e5c-a9dc-f9f2110235e3", "record_id": "flaws_cloudtrail:0000345:9aeef71b-6e76-4e5c-a9dc-f9f2110235e3", "row_index": 345, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aeef71b-6e76-4e5c-a9dc-f9f2110235e3", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "421044-74de-4cc4-bdd3-0e7e5efb2a66", "record_id": "flaws_cloudtrail:0000346:421044-74de-4cc4-bdd3-0e7e5efb2a66", "row_index": 346, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "421044-74de-4cc4-bdd3-0e7e5efb2a66", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289fce13-f4a8-4f7d-97cd-ecd54c0be807", "record_id": "flaws_cloudtrail:0000347:289fce13-f4a8-4f7d-97cd-ecd54c0be807", "row_index": 347, "timestamp": "2019-08-16T11:44:25Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289fce13-f4a8-4f7d-97cd-ecd54c0be807", "eventTime": "2019-08-16T11:44:25Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a5f64f0-11fb-4670-8079-899820f674e41", "record_id": "flaws_cloudtrail:0000348:2a5f64f0-11fb-4670-8079-899820f674e41", "row_index": 348, "timestamp": "2019-08-16T11:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a5f64f0-11fb-4670-8079-899820f674e41", "eventTime": "2019-08-16T11:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVF56FMB7D0EOABXH", "expiration": "Aug 16, 2019 6:04:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a5f64f0-11fb-4670-8079-899820f674e41", "record_id": "flaws_cloudtrail:0000349:2a5f64f0-11fb-4670-8079-899820f674e41", "row_index": 349, "timestamp": "2019-08-16T11:57:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a5f64f0-11fb-4670-8079-899820f674e41", "eventTime": "2019-08-16T11:57:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVF56FMB7D0EOABXH", "expiration": "Aug 16, 2019 6:04:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc358ee5-6563-43a0-a6df-392f97ed2861", "record_id": "flaws_cloudtrail:0000350:dc358ee5-6563-43a0-a6df-392f97ed2861", "row_index": 350, "timestamp": "2019-08-16T12:26:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc358ee5-6563-43a0-a6df-392f97ed2861", "eventTime": "2019-08-16T12:26:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ff2a646-895c-4515-b067-0de66df0b0ce", "record_id": "flaws_cloudtrail:0000351:1ff2a646-895c-4515-b067-0de66df0b0ce", "row_index": 351, "timestamp": "2019-08-16T12:26:30Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ff2a646-895c-4515-b067-0de66df0b0ce", "eventTime": "2019-08-16T12:26:30Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc358ee5-6563-43a0-a6df-392f97ed2861", "record_id": "flaws_cloudtrail:0000352:dc358ee5-6563-43a0-a6df-392f97ed2861", "row_index": 352, "timestamp": "2019-08-16T12:26:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc358ee5-6563-43a0-a6df-392f97ed2861", "eventTime": "2019-08-16T12:26:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ff2a646-895c-4515-b067-0de66df0b0ce", "record_id": "flaws_cloudtrail:0000353:1ff2a646-895c-4515-b067-0de66df0b0ce", "row_index": 353, "timestamp": "2019-08-16T12:26:30Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ff2a646-895c-4515-b067-0de66df0b0ce", "eventTime": "2019-08-16T12:26:30Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ee39e6-5baa-4212-95eb-45b55ebde429", "record_id": "flaws_cloudtrail:0000354:77ee39e6-5baa-4212-95eb-45b55ebde429", "row_index": 354, "timestamp": "2019-08-16T12:26:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ee39e6-5baa-4212-95eb-45b55ebde429", "eventTime": "2019-08-16T12:26:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ee39e6-5baa-4212-95eb-45b55ebde429", "record_id": "flaws_cloudtrail:0000355:77ee39e6-5baa-4212-95eb-45b55ebde429", "row_index": 355, "timestamp": "2019-08-16T12:26:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ee39e6-5baa-4212-95eb-45b55ebde429", "eventTime": "2019-08-16T12:26:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4305b482-33d7-4ae5-b5ce-fb264ef8cc26", "record_id": "flaws_cloudtrail:0000356:4305b482-33d7-4ae5-b5ce-fb264ef8cc26", "row_index": 356, "timestamp": "2019-08-16T12:26:32Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4305b482-33d7-4ae5-b5ce-fb264ef8cc26", "eventTime": "2019-08-16T12:26:32Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abddc122-123c-4168-86af-7bee6ef67000", "record_id": "flaws_cloudtrail:0000357:abddc122-123c-4168-86af-7bee6ef67000", "row_index": 357, "timestamp": "2019-08-16T12:26:32Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abddc122-123c-4168-86af-7bee6ef67000", "eventTime": "2019-08-16T12:26:32Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4305b482-33d7-4ae5-b5ce-fb264ef8cc26", "record_id": "flaws_cloudtrail:0000358:4305b482-33d7-4ae5-b5ce-fb264ef8cc26", "row_index": 358, "timestamp": "2019-08-16T12:26:32Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4305b482-33d7-4ae5-b5ce-fb264ef8cc26", "eventTime": "2019-08-16T12:26:32Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abddc122-123c-4168-86af-7bee6ef67000", "record_id": "flaws_cloudtrail:0000359:abddc122-123c-4168-86af-7bee6ef67000", "row_index": 359, "timestamp": "2019-08-16T12:26:32Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abddc122-123c-4168-86af-7bee6ef67000", "eventTime": "2019-08-16T12:26:32Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ba72267-e88a-4efb-908b-3e95c4edc0b3", "record_id": "flaws_cloudtrail:0000360:1ba72267-e88a-4efb-908b-3e95c4edc0b3", "row_index": 360, "timestamp": "2019-08-16T12:26:33Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ba72267-e88a-4efb-908b-3e95c4edc0b3", "eventTime": "2019-08-16T12:26:33Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ba72267-e88a-4efb-908b-3e95c4edc0b3", "record_id": "flaws_cloudtrail:0000361:1ba72267-e88a-4efb-908b-3e95c4edc0b3", "row_index": 361, "timestamp": "2019-08-16T12:26:33Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ba72267-e88a-4efb-908b-3e95c4edc0b3", "eventTime": "2019-08-16T12:26:33Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7247bcca-a7cb-48aa-b19e-4c313779deba", "record_id": "flaws_cloudtrail:0000362:7247bcca-a7cb-48aa-b19e-4c313779deba", "row_index": 362, "timestamp": "2019-08-16T12:26:34Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7247bcca-a7cb-48aa-b19e-4c313779deba", "eventTime": "2019-08-16T12:26:34Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "679f5d24-b9a1-49ec-964a-0d69025edd05", "record_id": "flaws_cloudtrail:0000363:679f5d24-b9a1-49ec-964a-0d69025edd05", "row_index": 363, "timestamp": "2019-08-16T12:26:34Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "679f5d24-b9a1-49ec-964a-0d69025edd05", "eventTime": "2019-08-16T12:26:34Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7247bcca-a7cb-48aa-b19e-4c313779deba", "record_id": "flaws_cloudtrail:0000364:7247bcca-a7cb-48aa-b19e-4c313779deba", "row_index": 364, "timestamp": "2019-08-16T12:26:34Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7247bcca-a7cb-48aa-b19e-4c313779deba", "eventTime": "2019-08-16T12:26:34Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "679f5d24-b9a1-49ec-964a-0d69025edd05", "record_id": "flaws_cloudtrail:0000365:679f5d24-b9a1-49ec-964a-0d69025edd05", "row_index": 365, "timestamp": "2019-08-16T12:26:34Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "679f5d24-b9a1-49ec-964a-0d69025edd05", "eventTime": "2019-08-16T12:26:34Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fbd9d3b-09b5-40c9-822d-4b4197628d71", "record_id": "flaws_cloudtrail:0000366:7fbd9d3b-09b5-40c9-822d-4b4197628d71", "row_index": 366, "timestamp": "2019-08-16T12:26:35Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fbd9d3b-09b5-40c9-822d-4b4197628d71", "eventTime": "2019-08-16T12:26:35Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fbd9d3b-09b5-40c9-822d-4b4197628d71", "record_id": "flaws_cloudtrail:0000367:7fbd9d3b-09b5-40c9-822d-4b4197628d71", "row_index": 367, "timestamp": "2019-08-16T12:26:35Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fbd9d3b-09b5-40c9-822d-4b4197628d71", "eventTime": "2019-08-16T12:26:35Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49069a8-7291-4138-aa7c-6c82af498b77", "record_id": "flaws_cloudtrail:0000368:49069a8-7291-4138-aa7c-6c82af498b77", "row_index": 368, "timestamp": "2019-08-16T12:26:36Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49069a8-7291-4138-aa7c-6c82af498b77", "eventTime": "2019-08-16T12:26:36Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a5f9ecc-e8b8-4a23-951b-6916a52b172c", "record_id": "flaws_cloudtrail:0000369:9a5f9ecc-e8b8-4a23-951b-6916a52b172c", "row_index": 369, "timestamp": "2019-08-16T12:26:36Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a5f9ecc-e8b8-4a23-951b-6916a52b172c", "eventTime": "2019-08-16T12:26:36Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49069a8-7291-4138-aa7c-6c82af498b77", "record_id": "flaws_cloudtrail:0000370:49069a8-7291-4138-aa7c-6c82af498b77", "row_index": 370, "timestamp": "2019-08-16T12:26:36Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49069a8-7291-4138-aa7c-6c82af498b77", "eventTime": "2019-08-16T12:26:36Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a5f9ecc-e8b8-4a23-951b-6916a52b172c", "record_id": "flaws_cloudtrail:0000371:9a5f9ecc-e8b8-4a23-951b-6916a52b172c", "row_index": 371, "timestamp": "2019-08-16T12:26:36Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a5f9ecc-e8b8-4a23-951b-6916a52b172c", "eventTime": "2019-08-16T12:26:36Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e18f0f2-7ea6-4d82-a0ce-5dcf31afbccd", "record_id": "flaws_cloudtrail:0000372:9e18f0f2-7ea6-4d82-a0ce-5dcf31afbccd", "row_index": 372, "timestamp": "2019-08-16T12:26:37Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e18f0f2-7ea6-4d82-a0ce-5dcf31afbccd", "eventTime": "2019-08-16T12:26:37Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e18f0f2-7ea6-4d82-a0ce-5dcf31afbccd", "record_id": "flaws_cloudtrail:0000373:9e18f0f2-7ea6-4d82-a0ce-5dcf31afbccd", "row_index": 373, "timestamp": "2019-08-16T12:26:37Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e18f0f2-7ea6-4d82-a0ce-5dcf31afbccd", "eventTime": "2019-08-16T12:26:37Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dd0c0ff-e8b1-40ee-b11f-acba90b62955", "record_id": "flaws_cloudtrail:0000374:3dd0c0ff-e8b1-40ee-b11f-acba90b62955", "row_index": 374, "timestamp": "2019-08-16T12:26:38Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dd0c0ff-e8b1-40ee-b11f-acba90b62955", "eventTime": "2019-08-16T12:26:38Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dd0c0ff-e8b1-40ee-b11f-acba90b62955", "record_id": "flaws_cloudtrail:0000375:3dd0c0ff-e8b1-40ee-b11f-acba90b62955", "row_index": 375, "timestamp": "2019-08-16T12:26:38Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dd0c0ff-e8b1-40ee-b11f-acba90b62955", "eventTime": "2019-08-16T12:26:38Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266cc4d8-8e51-44f4-8972-8370ab4ccb08", "record_id": "flaws_cloudtrail:0000376:266cc4d8-8e51-44f4-8972-8370ab4ccb08", "row_index": 376, "timestamp": "2019-08-16T12:26:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266cc4d8-8e51-44f4-8972-8370ab4ccb08", "eventTime": "2019-08-16T12:26:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "266cc4d8-8e51-44f4-8972-8370ab4ccb08", "record_id": "flaws_cloudtrail:0000377:266cc4d8-8e51-44f4-8972-8370ab4ccb08", "row_index": 377, "timestamp": "2019-08-16T12:26:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "266cc4d8-8e51-44f4-8972-8370ab4ccb08", "eventTime": "2019-08-16T12:26:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b922194-0b2c-421f-8813-887e8451a587", "record_id": "flaws_cloudtrail:0000378:8b922194-0b2c-421f-8813-887e8451a587", "row_index": 378, "timestamp": "2019-08-16T12:26:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b922194-0b2c-421f-8813-887e8451a587", "eventTime": "2019-08-16T12:26:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b922194-0b2c-421f-8813-887e8451a587", "record_id": "flaws_cloudtrail:0000379:8b922194-0b2c-421f-8813-887e8451a587", "row_index": 379, "timestamp": "2019-08-16T12:26:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b922194-0b2c-421f-8813-887e8451a587", "eventTime": "2019-08-16T12:26:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2260fb1c-ad8e-407f-9218-022aa503e007", "record_id": "flaws_cloudtrail:0000380:2260fb1c-ad8e-407f-9218-022aa503e007", "row_index": 380, "timestamp": "2019-08-16T12:26:41Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2260fb1c-ad8e-407f-9218-022aa503e007", "eventTime": "2019-08-16T12:26:41Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26da8074-5dba-42e0-a947-0f13320db", "record_id": "flaws_cloudtrail:0000381:26da8074-5dba-42e0-a947-0f13320db", "row_index": 381, "timestamp": "2019-08-16T12:26:41Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26da8074-5dba-42e0-a947-0f13320db", "eventTime": "2019-08-16T12:26:41Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2260fb1c-ad8e-407f-9218-022aa503e007", "record_id": "flaws_cloudtrail:0000382:2260fb1c-ad8e-407f-9218-022aa503e007", "row_index": 382, "timestamp": "2019-08-16T12:26:41Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2260fb1c-ad8e-407f-9218-022aa503e007", "eventTime": "2019-08-16T12:26:41Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26da8074-5dba-42e0-a947-0f13320db", "record_id": "flaws_cloudtrail:0000383:26da8074-5dba-42e0-a947-0f13320db", "row_index": 383, "timestamp": "2019-08-16T12:26:41Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26da8074-5dba-42e0-a947-0f13320db", "eventTime": "2019-08-16T12:26:41Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e611250-18e3-4c73-a29c-c96d6af039a2", "record_id": "flaws_cloudtrail:0000384:e611250-18e3-4c73-a29c-c96d6af039a2", "row_index": 384, "timestamp": "2019-08-16T12:26:42Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e611250-18e3-4c73-a29c-c96d6af039a2", "eventTime": "2019-08-16T12:26:42Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e611250-18e3-4c73-a29c-c96d6af039a2", "record_id": "flaws_cloudtrail:0000385:e611250-18e3-4c73-a29c-c96d6af039a2", "row_index": 385, "timestamp": "2019-08-16T12:26:42Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e611250-18e3-4c73-a29c-c96d6af039a2", "eventTime": "2019-08-16T12:26:42Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3175b057-7e57-440d-8872-96b18166a923", "record_id": "flaws_cloudtrail:0000386:3175b057-7e57-440d-8872-96b18166a923", "row_index": 386, "timestamp": "2019-08-16T12:26:43Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3175b057-7e57-440d-8872-96b18166a923", "eventTime": "2019-08-16T12:26:43Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7ab430-da78-4b73-b652-a470fa5e6e81", "record_id": "flaws_cloudtrail:0000387:4c7ab430-da78-4b73-b652-a470fa5e6e81", "row_index": 387, "timestamp": "2019-08-16T12:26:43Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7ab430-da78-4b73-b652-a470fa5e6e81", "eventTime": "2019-08-16T12:26:43Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3175b057-7e57-440d-8872-96b18166a923", "record_id": "flaws_cloudtrail:0000388:3175b057-7e57-440d-8872-96b18166a923", "row_index": 388, "timestamp": "2019-08-16T12:26:43Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3175b057-7e57-440d-8872-96b18166a923", "eventTime": "2019-08-16T12:26:43Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7ab430-da78-4b73-b652-a470fa5e6e81", "record_id": "flaws_cloudtrail:0000389:4c7ab430-da78-4b73-b652-a470fa5e6e81", "row_index": 389, "timestamp": "2019-08-16T12:26:43Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7ab430-da78-4b73-b652-a470fa5e6e81", "eventTime": "2019-08-16T12:26:43Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dca6118d-0b54-408b-8a36-5a5e8993a720", "record_id": "flaws_cloudtrail:0000390:dca6118d-0b54-408b-8a36-5a5e8993a720", "row_index": 390, "timestamp": "2019-08-16T12:26:44Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dca6118d-0b54-408b-8a36-5a5e8993a720", "eventTime": "2019-08-16T12:26:44Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dca6118d-0b54-408b-8a36-5a5e8993a720", "record_id": "flaws_cloudtrail:0000391:dca6118d-0b54-408b-8a36-5a5e8993a720", "row_index": 391, "timestamp": "2019-08-16T12:26:44Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dca6118d-0b54-408b-8a36-5a5e8993a720", "eventTime": "2019-08-16T12:26:44Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad752a58-faaf-4738-8b2e-474445ce3b5b", "record_id": "flaws_cloudtrail:0000392:ad752a58-faaf-4738-8b2e-474445ce3b5b", "row_index": 392, "timestamp": "2019-08-16T12:26:45Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad752a58-faaf-4738-8b2e-474445ce3b5b", "eventTime": "2019-08-16T12:26:45Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad752a58-faaf-4738-8b2e-474445ce3b5b", "record_id": "flaws_cloudtrail:0000393:ad752a58-faaf-4738-8b2e-474445ce3b5b", "row_index": 393, "timestamp": "2019-08-16T12:26:45Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad752a58-faaf-4738-8b2e-474445ce3b5b", "eventTime": "2019-08-16T12:26:45Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc09327f-ed08-43b1-9e9a-52e86ae241b9", "record_id": "flaws_cloudtrail:0000394:cc09327f-ed08-43b1-9e9a-52e86ae241b9", "row_index": 394, "timestamp": "2019-08-16T12:26:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc09327f-ed08-43b1-9e9a-52e86ae241b9", "eventTime": "2019-08-16T12:26:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "491637b0-76a1-4c5e-af3c-53b6a92d86aa", "record_id": "flaws_cloudtrail:0000395:491637b0-76a1-4c5e-af3c-53b6a92d86aa", "row_index": 395, "timestamp": "2019-08-16T12:26:46Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "491637b0-76a1-4c5e-af3c-53b6a92d86aa", "eventTime": "2019-08-16T12:26:46Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc09327f-ed08-43b1-9e9a-52e86ae241b9", "record_id": "flaws_cloudtrail:0000396:cc09327f-ed08-43b1-9e9a-52e86ae241b9", "row_index": 396, "timestamp": "2019-08-16T12:26:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc09327f-ed08-43b1-9e9a-52e86ae241b9", "eventTime": "2019-08-16T12:26:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "491637b0-76a1-4c5e-af3c-53b6a92d86aa", "record_id": "flaws_cloudtrail:0000397:491637b0-76a1-4c5e-af3c-53b6a92d86aa", "row_index": 397, "timestamp": "2019-08-16T12:26:46Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "491637b0-76a1-4c5e-af3c-53b6a92d86aa", "eventTime": "2019-08-16T12:26:46Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "857ba068-874a-48d4-841a-7a3427e6456f", "record_id": "flaws_cloudtrail:0000398:857ba068-874a-48d4-841a-7a3427e6456f", "row_index": 398, "timestamp": "2019-08-16T12:26:47Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "857ba068-874a-48d4-841a-7a3427e6456f", "eventTime": "2019-08-16T12:26:47Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "857ba068-874a-48d4-841a-7a3427e6456f", "record_id": "flaws_cloudtrail:0000399:857ba068-874a-48d4-841a-7a3427e6456f", "row_index": 399, "timestamp": "2019-08-16T12:26:47Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "857ba068-874a-48d4-841a-7a3427e6456f", "eventTime": "2019-08-16T12:26:47Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "777d5b57-c230-49fa-862a-ad5e981a4234", "record_id": "flaws_cloudtrail:0000400:777d5b57-c230-49fa-862a-ad5e981a4234", "row_index": 400, "timestamp": "2019-08-16T12:26:48Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "777d5b57-c230-49fa-862a-ad5e981a4234", "eventTime": "2019-08-16T12:26:48Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "777d5b57-c230-49fa-862a-ad5e981a4234", "record_id": "flaws_cloudtrail:0000401:777d5b57-c230-49fa-862a-ad5e981a4234", "row_index": 401, "timestamp": "2019-08-16T12:26:48Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "777d5b57-c230-49fa-862a-ad5e981a4234", "eventTime": "2019-08-16T12:26:48Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f34bf9-bccb-4bcf-be96-0bb75e3c2209", "record_id": "flaws_cloudtrail:0000402:44f34bf9-bccb-4bcf-be96-0bb75e3c2209", "row_index": 402, "timestamp": "2019-08-16T12:26:49Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f34bf9-bccb-4bcf-be96-0bb75e3c2209", "eventTime": "2019-08-16T12:26:49Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae437e81-3450-4291-8b40-c7baa5b17e64", "record_id": "flaws_cloudtrail:0000403:ae437e81-3450-4291-8b40-c7baa5b17e64", "row_index": 403, "timestamp": "2019-08-16T12:26:49Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae437e81-3450-4291-8b40-c7baa5b17e64", "eventTime": "2019-08-16T12:26:49Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d094e28f-019e-4fe6-980d-5d12ccf4a4f4", "record_id": "flaws_cloudtrail:0000404:d094e28f-019e-4fe6-980d-5d12ccf4a4f4", "row_index": 404, "timestamp": "2019-08-16T12:26:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d094e28f-019e-4fe6-980d-5d12ccf4a4f4", "eventTime": "2019-08-16T12:26:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f34bf9-bccb-4bcf-be96-0bb75e3c2209", "record_id": "flaws_cloudtrail:0000405:44f34bf9-bccb-4bcf-be96-0bb75e3c2209", "row_index": 405, "timestamp": "2019-08-16T12:26:49Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f34bf9-bccb-4bcf-be96-0bb75e3c2209", "eventTime": "2019-08-16T12:26:49Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae437e81-3450-4291-8b40-c7baa5b17e64", "record_id": "flaws_cloudtrail:0000406:ae437e81-3450-4291-8b40-c7baa5b17e64", "row_index": 406, "timestamp": "2019-08-16T12:26:49Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae437e81-3450-4291-8b40-c7baa5b17e64", "eventTime": "2019-08-16T12:26:49Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d094e28f-019e-4fe6-980d-5d12ccf4a4f4", "record_id": "flaws_cloudtrail:0000407:d094e28f-019e-4fe6-980d-5d12ccf4a4f4", "row_index": 407, "timestamp": "2019-08-16T12:26:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d094e28f-019e-4fe6-980d-5d12ccf4a4f4", "eventTime": "2019-08-16T12:26:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3e4294e-5ac7-4a4f-880b-4c9001d3a81c", "record_id": "flaws_cloudtrail:0000408:c3e4294e-5ac7-4a4f-880b-4c9001d3a81c", "row_index": 408, "timestamp": "2019-08-16T12:26:50Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3e4294e-5ac7-4a4f-880b-4c9001d3a81c", "eventTime": "2019-08-16T12:26:50Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ecc044-4e54-46ff-89d2-30ca2ca3c2bc", "record_id": "flaws_cloudtrail:0000409:b4ecc044-4e54-46ff-89d2-30ca2ca3c2bc", "row_index": 409, "timestamp": "2019-08-16T12:26:50Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ecc044-4e54-46ff-89d2-30ca2ca3c2bc", "eventTime": "2019-08-16T12:26:50Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "932d131a-804c-46ae-aa7a-4f706dec75a9", "record_id": "flaws_cloudtrail:0000410:932d131a-804c-46ae-aa7a-4f706dec75a9", "row_index": 410, "timestamp": "2019-08-16T12:26:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "932d131a-804c-46ae-aa7a-4f706dec75a9", "eventTime": "2019-08-16T12:26:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIANQQT9I6KV59YR2VA", "expiration": "Aug 16, 2019 1:26:50 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3e4294e-5ac7-4a4f-880b-4c9001d3a81c", "record_id": "flaws_cloudtrail:0000411:c3e4294e-5ac7-4a4f-880b-4c9001d3a81c", "row_index": 411, "timestamp": "2019-08-16T12:26:50Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3e4294e-5ac7-4a4f-880b-4c9001d3a81c", "eventTime": "2019-08-16T12:26:50Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4ecc044-4e54-46ff-89d2-30ca2ca3c2bc", "record_id": "flaws_cloudtrail:0000412:b4ecc044-4e54-46ff-89d2-30ca2ca3c2bc", "row_index": 412, "timestamp": "2019-08-16T12:26:50Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4ecc044-4e54-46ff-89d2-30ca2ca3c2bc", "eventTime": "2019-08-16T12:26:50Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "932d131a-804c-46ae-aa7a-4f706dec75a9", "record_id": "flaws_cloudtrail:0000413:932d131a-804c-46ae-aa7a-4f706dec75a9", "row_index": 413, "timestamp": "2019-08-16T12:26:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1937, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "932d131a-804c-46ae-aa7a-4f706dec75a9", "eventTime": "2019-08-16T12:26:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIANQQT9I6KV59YR2VA", "expiration": "Aug 16, 2019 1:26:50 PM", "sessionToken": "AgoJb3JpZ2luX2VjEK3//////////wEaCXVzLXdlc3QtMiJHMEUCIHXJC7aaeYcYs0lruRjESsDP364EowjwFn1yOddrTpEgAiEA+8V3usT5Gb4BHzpAYHeb0KhDK7VlptItFeLxnfG5XnYq6AIIRhAAGgw5NzU0MjYyNjIwMjkiDDEXsjPZgNv7SiQ2myrFAlydeoH9Mv7etwSEblJkSx3auuL/QWT9JUh3aRfPTrUoL5rbe0qSNoh2u6P+JUUvzVanOahFZb5Y1/3LcYcP0jTc+/0PUYlg1MeL2AY4dv4NSQOMks+xLyTB6AUu4URpbTqcM9db9F+NkXsdmNNg94mYuphTBDZ5sF3tbIOPQ9E7LgCCSw4Xo+Qe1kC3+tYArEGF1zyn0foXHEASa8syTmAE1EFCfX2gq7OzxpcHMNu/s5IMkx6hyUMAYIXOU4yXXx8j6KPL1O8SksAf90sn/DKbA4WwYlRnDURb25pUPewWKhQ1PqaROlrz5rjP5EYig3apS3EcxiEc9yGYsWDnNy1hdI1N6szY87VbU2frYVKSXJmKXRPP6OFbIdXJ6vhzPtUmxvRhy5SS1d4jCqUeIKvLyQ0kdLczcK1R7K5TmyBFvHgWUvUwisLa6gU6tAHHqOJthZxdkuwGIERE444RflfSf+hREW1PM/aadwa56DdYIXLsd9qFhw03hg4vyKtwiXHqCAcKdb1R/hNqngo1+Pc5FsX6o+D6Zp0jgrE6suYSO4ljpysozze+pnYP1D9LsK4Eh+m2xnSZjWQlWWDHjuozxhyVhsCX6fNItHyU7Uv/82tHeFgQ3DcBbVgJ/4GQPGdApHPnMiL0vGkMjY3DSnkwo7+brx/tRjQMOpztdsPE80A="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48dea3b-0590-4eb6-9eb4-4ce54d5ae059", "record_id": "flaws_cloudtrail:0000414:c48dea3b-0590-4eb6-9eb4-4ce54d5ae059", "row_index": 414, "timestamp": "2019-08-16T12:26:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48dea3b-0590-4eb6-9eb4-4ce54d5ae059", "eventTime": "2019-08-16T12:26:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f683a41-9ca2-4a55-ac97-c652a6f9846a", "record_id": "flaws_cloudtrail:0000415:8f683a41-9ca2-4a55-ac97-c652a6f9846a", "row_index": 415, "timestamp": "2019-08-16T12:26:51Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f683a41-9ca2-4a55-ac97-c652a6f9846a", "eventTime": "2019-08-16T12:26:51Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42bef897-bcf5-4c29-b19b-cbd1be603b88", "record_id": "flaws_cloudtrail:0000416:42bef897-bcf5-4c29-b19b-cbd1be603b88", "row_index": 416, "timestamp": "2019-08-16T12:26:51Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42bef897-bcf5-4c29-b19b-cbd1be603b88", "eventTime": "2019-08-16T12:26:51Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48dea3b-0590-4eb6-9eb4-4ce54d5ae059", "record_id": "flaws_cloudtrail:0000417:c48dea3b-0590-4eb6-9eb4-4ce54d5ae059", "row_index": 417, "timestamp": "2019-08-16T12:26:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48dea3b-0590-4eb6-9eb4-4ce54d5ae059", "eventTime": "2019-08-16T12:26:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f683a41-9ca2-4a55-ac97-c652a6f9846a", "record_id": "flaws_cloudtrail:0000418:8f683a41-9ca2-4a55-ac97-c652a6f9846a", "row_index": 418, "timestamp": "2019-08-16T12:26:51Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f683a41-9ca2-4a55-ac97-c652a6f9846a", "eventTime": "2019-08-16T12:26:51Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42bef897-bcf5-4c29-b19b-cbd1be603b88", "record_id": "flaws_cloudtrail:0000419:42bef897-bcf5-4c29-b19b-cbd1be603b88", "row_index": 419, "timestamp": "2019-08-16T12:26:51Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42bef897-bcf5-4c29-b19b-cbd1be603b88", "eventTime": "2019-08-16T12:26:51Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947350b-167d-49c5-b384-c42b0c5f676f", "record_id": "flaws_cloudtrail:0000420:947350b-167d-49c5-b384-c42b0c5f676f", "row_index": 420, "timestamp": "2019-08-16T12:26:52Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947350b-167d-49c5-b384-c42b0c5f676f", "eventTime": "2019-08-16T12:26:52Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02eb8058-a267-4fb7-90c7-b66c2c057674b", "record_id": "flaws_cloudtrail:0000421:02eb8058-a267-4fb7-90c7-b66c2c057674b", "row_index": 421, "timestamp": "2019-08-16T12:26:52Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02eb8058-a267-4fb7-90c7-b66c2c057674b", "eventTime": "2019-08-16T12:26:52Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7c26c7b-579f-405e-80a2-7ada3db2de4a", "record_id": "flaws_cloudtrail:0000422:d7c26c7b-579f-405e-80a2-7ada3db2de4a", "row_index": 422, "timestamp": "2019-08-16T12:26:52Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7c26c7b-579f-405e-80a2-7ada3db2de4a", "eventTime": "2019-08-16T12:26:52Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947350b-167d-49c5-b384-c42b0c5f676f", "record_id": "flaws_cloudtrail:0000423:947350b-167d-49c5-b384-c42b0c5f676f", "row_index": 423, "timestamp": "2019-08-16T12:26:52Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947350b-167d-49c5-b384-c42b0c5f676f", "eventTime": "2019-08-16T12:26:52Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02eb8058-a267-4fb7-90c7-b66c2c057674b", "record_id": "flaws_cloudtrail:0000424:02eb8058-a267-4fb7-90c7-b66c2c057674b", "row_index": 424, "timestamp": "2019-08-16T12:26:52Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02eb8058-a267-4fb7-90c7-b66c2c057674b", "eventTime": "2019-08-16T12:26:52Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7c26c7b-579f-405e-80a2-7ada3db2de4a", "record_id": "flaws_cloudtrail:0000425:d7c26c7b-579f-405e-80a2-7ada3db2de4a", "row_index": 425, "timestamp": "2019-08-16T12:26:52Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7c26c7b-579f-405e-80a2-7ada3db2de4a", "eventTime": "2019-08-16T12:26:52Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9064eb9-f689-41cb-826e-f615d6cdd0f5", "record_id": "flaws_cloudtrail:0000426:c9064eb9-f689-41cb-826e-f615d6cdd0f5", "row_index": 426, "timestamp": "2019-08-16T12:26:53Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9064eb9-f689-41cb-826e-f615d6cdd0f5", "eventTime": "2019-08-16T12:26:53Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb984d2c-8a99-4de7-957b-6790522f1df6", "record_id": "flaws_cloudtrail:0000427:eb984d2c-8a99-4de7-957b-6790522f1df6", "row_index": 427, "timestamp": "2019-08-16T12:26:53Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb984d2c-8a99-4de7-957b-6790522f1df6", "eventTime": "2019-08-16T12:26:53Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9064eb9-f689-41cb-826e-f615d6cdd0f5", "record_id": "flaws_cloudtrail:0000428:c9064eb9-f689-41cb-826e-f615d6cdd0f5", "row_index": 428, "timestamp": "2019-08-16T12:26:53Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9064eb9-f689-41cb-826e-f615d6cdd0f5", "eventTime": "2019-08-16T12:26:53Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb984d2c-8a99-4de7-957b-6790522f1df6", "record_id": "flaws_cloudtrail:0000429:eb984d2c-8a99-4de7-957b-6790522f1df6", "row_index": 429, "timestamp": "2019-08-16T12:26:53Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb984d2c-8a99-4de7-957b-6790522f1df6", "eventTime": "2019-08-16T12:26:53Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d2bf4b8-11a5-44f6-9d21-e6bbd3ad4c0a", "record_id": "flaws_cloudtrail:0000430:9d2bf4b8-11a5-44f6-9d21-e6bbd3ad4c0a", "row_index": 430, "timestamp": "2019-08-16T12:26:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d2bf4b8-11a5-44f6-9d21-e6bbd3ad4c0a", "eventTime": "2019-08-16T12:26:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01da55ca-d1a5-4ba5-83ca-d1117ba59123", "record_id": "flaws_cloudtrail:0000431:01da55ca-d1a5-4ba5-83ca-d1117ba59123", "row_index": 431, "timestamp": "2019-08-16T12:26:55Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01da55ca-d1a5-4ba5-83ca-d1117ba59123", "eventTime": "2019-08-16T12:26:55Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d2bf4b8-11a5-44f6-9d21-e6bbd3ad4c0a", "record_id": "flaws_cloudtrail:0000432:9d2bf4b8-11a5-44f6-9d21-e6bbd3ad4c0a", "row_index": 432, "timestamp": "2019-08-16T12:26:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d2bf4b8-11a5-44f6-9d21-e6bbd3ad4c0a", "eventTime": "2019-08-16T12:26:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01da55ca-d1a5-4ba5-83ca-d1117ba59123", "record_id": "flaws_cloudtrail:0000433:01da55ca-d1a5-4ba5-83ca-d1117ba59123", "row_index": 433, "timestamp": "2019-08-16T12:26:55Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01da55ca-d1a5-4ba5-83ca-d1117ba59123", "eventTime": "2019-08-16T12:26:55Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366eaa4a-a07d-44ab-9e92-9de545ffc9c4", "record_id": "flaws_cloudtrail:0000434:366eaa4a-a07d-44ab-9e92-9de545ffc9c4", "row_index": 434, "timestamp": "2019-08-16T12:26:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366eaa4a-a07d-44ab-9e92-9de545ffc9c4", "eventTime": "2019-08-16T12:26:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49d9d5d8-5020-43f9-ae3b-80b920625c0b", "record_id": "flaws_cloudtrail:0000435:49d9d5d8-5020-43f9-ae3b-80b920625c0b", "row_index": 435, "timestamp": "2019-08-16T12:26:56Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49d9d5d8-5020-43f9-ae3b-80b920625c0b", "eventTime": "2019-08-16T12:26:56Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366eaa4a-a07d-44ab-9e92-9de545ffc9c4", "record_id": "flaws_cloudtrail:0000436:366eaa4a-a07d-44ab-9e92-9de545ffc9c4", "row_index": 436, "timestamp": "2019-08-16T12:26:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366eaa4a-a07d-44ab-9e92-9de545ffc9c4", "eventTime": "2019-08-16T12:26:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49d9d5d8-5020-43f9-ae3b-80b920625c0b", "record_id": "flaws_cloudtrail:0000437:49d9d5d8-5020-43f9-ae3b-80b920625c0b", "row_index": 437, "timestamp": "2019-08-16T12:26:56Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49d9d5d8-5020-43f9-ae3b-80b920625c0b", "eventTime": "2019-08-16T12:26:56Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca6d41d0-cbfb-4054-91a9-22ac83b78d11", "record_id": "flaws_cloudtrail:0000438:ca6d41d0-cbfb-4054-91a9-22ac83b78d11", "row_index": 438, "timestamp": "2019-08-16T12:26:57Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca6d41d0-cbfb-4054-91a9-22ac83b78d11", "eventTime": "2019-08-16T12:26:57Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca6d41d0-cbfb-4054-91a9-22ac83b78d11", "record_id": "flaws_cloudtrail:0000439:ca6d41d0-cbfb-4054-91a9-22ac83b78d11", "row_index": 439, "timestamp": "2019-08-16T12:26:57Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca6d41d0-cbfb-4054-91a9-22ac83b78d11", "eventTime": "2019-08-16T12:26:57Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d42552b3-7b73-412f-ad5a-476395ae8998", "record_id": "flaws_cloudtrail:0000440:d42552b3-7b73-412f-ad5a-476395ae8998", "row_index": 440, "timestamp": "2019-08-16T12:26:58Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d42552b3-7b73-412f-ad5a-476395ae8998", "eventTime": "2019-08-16T12:26:58Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4bb0d9-7f4d-484e-9ea1-75788d70ef54", "record_id": "flaws_cloudtrail:0000441:0f4bb0d9-7f4d-484e-9ea1-75788d70ef54", "row_index": 441, "timestamp": "2019-08-16T12:26:58Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4bb0d9-7f4d-484e-9ea1-75788d70ef54", "eventTime": "2019-08-16T12:26:58Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d42552b3-7b73-412f-ad5a-476395ae8998", "record_id": "flaws_cloudtrail:0000442:d42552b3-7b73-412f-ad5a-476395ae8998", "row_index": 442, "timestamp": "2019-08-16T12:26:58Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d42552b3-7b73-412f-ad5a-476395ae8998", "eventTime": "2019-08-16T12:26:58Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4bb0d9-7f4d-484e-9ea1-75788d70ef54", "record_id": "flaws_cloudtrail:0000443:0f4bb0d9-7f4d-484e-9ea1-75788d70ef54", "row_index": 443, "timestamp": "2019-08-16T12:26:58Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4bb0d9-7f4d-484e-9ea1-75788d70ef54", "eventTime": "2019-08-16T12:26:58Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f640f9-5f17-405c-b0b6-c71dff66a793", "record_id": "flaws_cloudtrail:0000444:d7f640f9-5f17-405c-b0b6-c71dff66a793", "row_index": 444, "timestamp": "2019-08-16T12:26:59Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f640f9-5f17-405c-b0b6-c71dff66a793", "eventTime": "2019-08-16T12:26:59Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f640f9-5f17-405c-b0b6-c71dff66a793", "record_id": "flaws_cloudtrail:0000445:d7f640f9-5f17-405c-b0b6-c71dff66a793", "row_index": 445, "timestamp": "2019-08-16T12:26:59Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f640f9-5f17-405c-b0b6-c71dff66a793", "eventTime": "2019-08-16T12:26:59Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0779d9f8-84e1-45cc-9b85-791ac483551", "record_id": "flaws_cloudtrail:0000446:0779d9f8-84e1-45cc-9b85-791ac483551", "row_index": 446, "timestamp": "2019-08-16T12:27:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0779d9f8-84e1-45cc-9b85-791ac483551", "eventTime": "2019-08-16T12:27:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4545c725-9122-4313-a58c-ed850bb8617d", "record_id": "flaws_cloudtrail:0000447:4545c725-9122-4313-a58c-ed850bb8617d", "row_index": 447, "timestamp": "2019-08-16T12:27:00Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4545c725-9122-4313-a58c-ed850bb8617d", "eventTime": "2019-08-16T12:27:00Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0779d9f8-84e1-45cc-9b85-791ac483551", "record_id": "flaws_cloudtrail:0000448:0779d9f8-84e1-45cc-9b85-791ac483551", "row_index": 448, "timestamp": "2019-08-16T12:27:00Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0779d9f8-84e1-45cc-9b85-791ac483551", "eventTime": "2019-08-16T12:27:00Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4545c725-9122-4313-a58c-ed850bb8617d", "record_id": "flaws_cloudtrail:0000449:4545c725-9122-4313-a58c-ed850bb8617d", "row_index": 449, "timestamp": "2019-08-16T12:27:00Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4545c725-9122-4313-a58c-ed850bb8617d", "eventTime": "2019-08-16T12:27:00Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d163d17b-2f35-4a6d-949d-fef504dabd9a", "record_id": "flaws_cloudtrail:0000450:d163d17b-2f35-4a6d-949d-fef504dabd9a", "row_index": 450, "timestamp": "2019-08-16T12:27:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d163d17b-2f35-4a6d-949d-fef504dabd9a", "eventTime": "2019-08-16T12:27:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d163d17b-2f35-4a6d-949d-fef504dabd9a", "record_id": "flaws_cloudtrail:0000451:d163d17b-2f35-4a6d-949d-fef504dabd9a", "row_index": 451, "timestamp": "2019-08-16T12:27:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d163d17b-2f35-4a6d-949d-fef504dabd9a", "eventTime": "2019-08-16T12:27:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f3af4a2-a26e-4933-8168-55c99c2b3890", "record_id": "flaws_cloudtrail:0000452:5f3af4a2-a26e-4933-8168-55c99c2b3890", "row_index": 452, "timestamp": "2019-08-16T12:27:02Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f3af4a2-a26e-4933-8168-55c99c2b3890", "eventTime": "2019-08-16T12:27:02Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bee6fdf3-8309-4840-8dc3-51b14af01a9e", "record_id": "flaws_cloudtrail:0000453:bee6fdf3-8309-4840-8dc3-51b14af01a9e", "row_index": 453, "timestamp": "2019-08-16T12:27:02Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bee6fdf3-8309-4840-8dc3-51b14af01a9e", "eventTime": "2019-08-16T12:27:02Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f3af4a2-a26e-4933-8168-55c99c2b3890", "record_id": "flaws_cloudtrail:0000454:5f3af4a2-a26e-4933-8168-55c99c2b3890", "row_index": 454, "timestamp": "2019-08-16T12:27:02Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f3af4a2-a26e-4933-8168-55c99c2b3890", "eventTime": "2019-08-16T12:27:02Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bee6fdf3-8309-4840-8dc3-51b14af01a9e", "record_id": "flaws_cloudtrail:0000455:bee6fdf3-8309-4840-8dc3-51b14af01a9e", "row_index": 455, "timestamp": "2019-08-16T12:27:02Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bee6fdf3-8309-4840-8dc3-51b14af01a9e", "eventTime": "2019-08-16T12:27:02Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4432d8cf-a41c-4eb4-a410-51bcfaec09ca", "record_id": "flaws_cloudtrail:0000456:4432d8cf-a41c-4eb4-a410-51bcfaec09ca", "row_index": 456, "timestamp": "2019-08-16T12:27:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4432d8cf-a41c-4eb4-a410-51bcfaec09ca", "eventTime": "2019-08-16T12:27:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4432d8cf-a41c-4eb4-a410-51bcfaec09ca", "record_id": "flaws_cloudtrail:0000457:4432d8cf-a41c-4eb4-a410-51bcfaec09ca", "row_index": 457, "timestamp": "2019-08-16T12:27:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4432d8cf-a41c-4eb4-a410-51bcfaec09ca", "eventTime": "2019-08-16T12:27:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29a5bef1-91ca-46da-bf0e-46787b916e9d", "record_id": "flaws_cloudtrail:0000458:29a5bef1-91ca-46da-bf0e-46787b916e9d", "row_index": 458, "timestamp": "2019-08-16T12:27:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29a5bef1-91ca-46da-bf0e-46787b916e9d", "eventTime": "2019-08-16T12:27:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29a5bef1-91ca-46da-bf0e-46787b916e9d", "record_id": "flaws_cloudtrail:0000459:29a5bef1-91ca-46da-bf0e-46787b916e9d", "row_index": 459, "timestamp": "2019-08-16T12:27:05Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29a5bef1-91ca-46da-bf0e-46787b916e9d", "eventTime": "2019-08-16T12:27:05Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279129c6b-2b47-4ef5-b460-4dfbd6bdbf7b", "record_id": "flaws_cloudtrail:0000460:279129c6b-2b47-4ef5-b460-4dfbd6bdbf7b", "row_index": 460, "timestamp": "2019-08-16T12:27:06Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279129c6b-2b47-4ef5-b460-4dfbd6bdbf7b", "eventTime": "2019-08-16T12:27:06Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279129c6b-2b47-4ef5-b460-4dfbd6bdbf7b", "record_id": "flaws_cloudtrail:0000461:279129c6b-2b47-4ef5-b460-4dfbd6bdbf7b", "row_index": 461, "timestamp": "2019-08-16T12:27:06Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279129c6b-2b47-4ef5-b460-4dfbd6bdbf7b", "eventTime": "2019-08-16T12:27:06Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec6c16b9-6c05-4b5d-857c-84912cd7b0cf", "record_id": "flaws_cloudtrail:0000462:ec6c16b9-6c05-4b5d-857c-84912cd7b0cf", "row_index": 462, "timestamp": "2019-08-16T12:27:07Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec6c16b9-6c05-4b5d-857c-84912cd7b0cf", "eventTime": "2019-08-16T12:27:07Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec6c16b9-6c05-4b5d-857c-84912cd7b0cf", "record_id": "flaws_cloudtrail:0000463:ec6c16b9-6c05-4b5d-857c-84912cd7b0cf", "row_index": 463, "timestamp": "2019-08-16T12:27:07Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec6c16b9-6c05-4b5d-857c-84912cd7b0cf", "eventTime": "2019-08-16T12:27:07Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba944f71-6a4b-4109-a244-6ee74895b4", "record_id": "flaws_cloudtrail:0000464:ba944f71-6a4b-4109-a244-6ee74895b4", "row_index": 464, "timestamp": "2019-08-16T12:27:08Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba944f71-6a4b-4109-a244-6ee74895b4", "eventTime": "2019-08-16T12:27:08Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba944f71-6a4b-4109-a244-6ee74895b4", "record_id": "flaws_cloudtrail:0000465:ba944f71-6a4b-4109-a244-6ee74895b4", "row_index": 465, "timestamp": "2019-08-16T12:27:08Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba944f71-6a4b-4109-a244-6ee74895b4", "eventTime": "2019-08-16T12:27:08Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38169e-2a96-429f-a48c-b3ae32fd546a", "record_id": "flaws_cloudtrail:0000466:b38169e-2a96-429f-a48c-b3ae32fd546a", "row_index": 466, "timestamp": "2019-08-16T12:27:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38169e-2a96-429f-a48c-b3ae32fd546a", "eventTime": "2019-08-16T12:27:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea4df80e-c776-4675-888c-e20485456185", "record_id": "flaws_cloudtrail:0000467:ea4df80e-c776-4675-888c-e20485456185", "row_index": 467, "timestamp": "2019-08-16T12:27:09Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea4df80e-c776-4675-888c-e20485456185", "eventTime": "2019-08-16T12:27:09Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38169e-2a96-429f-a48c-b3ae32fd546a", "record_id": "flaws_cloudtrail:0000468:b38169e-2a96-429f-a48c-b3ae32fd546a", "row_index": 468, "timestamp": "2019-08-16T12:27:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38169e-2a96-429f-a48c-b3ae32fd546a", "eventTime": "2019-08-16T12:27:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea4df80e-c776-4675-888c-e20485456185", "record_id": "flaws_cloudtrail:0000469:ea4df80e-c776-4675-888c-e20485456185", "row_index": 469, "timestamp": "2019-08-16T12:27:09Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea4df80e-c776-4675-888c-e20485456185", "eventTime": "2019-08-16T12:27:09Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bce6723-bed1-44f3-aa84-faf3f8759a9b", "record_id": "flaws_cloudtrail:0000470:2bce6723-bed1-44f3-aa84-faf3f8759a9b", "row_index": 470, "timestamp": "2019-08-16T12:27:10Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bce6723-bed1-44f3-aa84-faf3f8759a9b", "eventTime": "2019-08-16T12:27:10Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bce6723-bed1-44f3-aa84-faf3f8759a9b", "record_id": "flaws_cloudtrail:0000471:2bce6723-bed1-44f3-aa84-faf3f8759a9b", "row_index": 471, "timestamp": "2019-08-16T12:27:10Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bce6723-bed1-44f3-aa84-faf3f8759a9b", "eventTime": "2019-08-16T12:27:10Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e1c3ec0-7bed-4acd-94f9-b5299f57bccd", "record_id": "flaws_cloudtrail:0000472:8e1c3ec0-7bed-4acd-94f9-b5299f57bccd", "row_index": 472, "timestamp": "2019-08-16T12:27:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e1c3ec0-7bed-4acd-94f9-b5299f57bccd", "eventTime": "2019-08-16T12:27:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e1c3ec0-7bed-4acd-94f9-b5299f57bccd", "record_id": "flaws_cloudtrail:0000473:8e1c3ec0-7bed-4acd-94f9-b5299f57bccd", "row_index": 473, "timestamp": "2019-08-16T12:27:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e1c3ec0-7bed-4acd-94f9-b5299f57bccd", "eventTime": "2019-08-16T12:27:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e4920c7-377a-4fd0-895b-b30b842dd12d", "record_id": "flaws_cloudtrail:0000474:2e4920c7-377a-4fd0-895b-b30b842dd12d", "row_index": 474, "timestamp": "2019-08-16T12:27:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e4920c7-377a-4fd0-895b-b30b842dd12d", "eventTime": "2019-08-16T12:27:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e4920c7-377a-4fd0-895b-b30b842dd12d", "record_id": "flaws_cloudtrail:0000475:2e4920c7-377a-4fd0-895b-b30b842dd12d", "row_index": 475, "timestamp": "2019-08-16T12:27:12Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e4920c7-377a-4fd0-895b-b30b842dd12d", "eventTime": "2019-08-16T12:27:12Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a9108d-4465-4bcf-9006-877c4b046cec", "record_id": "flaws_cloudtrail:0000476:c4a9108d-4465-4bcf-9006-877c4b046cec", "row_index": 476, "timestamp": "2019-08-16T12:27:13Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a9108d-4465-4bcf-9006-877c4b046cec", "eventTime": "2019-08-16T12:27:13Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a9108d-4465-4bcf-9006-877c4b046cec", "record_id": "flaws_cloudtrail:0000477:c4a9108d-4465-4bcf-9006-877c4b046cec", "row_index": 477, "timestamp": "2019-08-16T12:27:13Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a9108d-4465-4bcf-9006-877c4b046cec", "eventTime": "2019-08-16T12:27:13Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248cb70f-0880-49a5-a645-b20074f3adf", "record_id": "flaws_cloudtrail:0000478:248cb70f-0880-49a5-a645-b20074f3adf", "row_index": 478, "timestamp": "2019-08-16T12:27:14Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248cb70f-0880-49a5-a645-b20074f3adf", "eventTime": "2019-08-16T12:27:14Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610d4e96-3f88-4342-b99a-69a16f4f1515", "record_id": "flaws_cloudtrail:0000479:610d4e96-3f88-4342-b99a-69a16f4f1515", "row_index": 479, "timestamp": "2019-08-16T12:27:14Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610d4e96-3f88-4342-b99a-69a16f4f1515", "eventTime": "2019-08-16T12:27:14Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248cb70f-0880-49a5-a645-b20074f3adf", "record_id": "flaws_cloudtrail:0000480:248cb70f-0880-49a5-a645-b20074f3adf", "row_index": 480, "timestamp": "2019-08-16T12:27:14Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248cb70f-0880-49a5-a645-b20074f3adf", "eventTime": "2019-08-16T12:27:14Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610d4e96-3f88-4342-b99a-69a16f4f1515", "record_id": "flaws_cloudtrail:0000481:610d4e96-3f88-4342-b99a-69a16f4f1515", "row_index": 481, "timestamp": "2019-08-16T12:27:14Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610d4e96-3f88-4342-b99a-69a16f4f1515", "eventTime": "2019-08-16T12:27:14Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb777f0-6797-4ae3-ab6c-5b04b364d772", "record_id": "flaws_cloudtrail:0000482:dcb777f0-6797-4ae3-ab6c-5b04b364d772", "row_index": 482, "timestamp": "2019-08-16T12:27:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb777f0-6797-4ae3-ab6c-5b04b364d772", "eventTime": "2019-08-16T12:27:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb777f0-6797-4ae3-ab6c-5b04b364d772", "record_id": "flaws_cloudtrail:0000483:dcb777f0-6797-4ae3-ab6c-5b04b364d772", "row_index": 483, "timestamp": "2019-08-16T12:27:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb777f0-6797-4ae3-ab6c-5b04b364d772", "eventTime": "2019-08-16T12:27:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e780e7d6-12d1-4c79-91c4-379894bb1460", "record_id": "flaws_cloudtrail:0000484:e780e7d6-12d1-4c79-91c4-379894bb1460", "row_index": 484, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e780e7d6-12d1-4c79-91c4-379894bb1460", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811b96c1-74cd-4c8c-9d56-5d456da5649b", "record_id": "flaws_cloudtrail:0000485:811b96c1-74cd-4c8c-9d56-5d456da5649b", "row_index": 485, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811b96c1-74cd-4c8c-9d56-5d456da5649b", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b7ea0b-569b-416a-a751-ea223957b69bb", "record_id": "flaws_cloudtrail:0000486:62b7ea0b-569b-416a-a751-ea223957b69bb", "row_index": 486, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b7ea0b-569b-416a-a751-ea223957b69bb", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e942e736-cb0c-496b-8cd2-f5d5d00c3562", "record_id": "flaws_cloudtrail:0000487:e942e736-cb0c-496b-8cd2-f5d5d00c3562", "row_index": 487, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e942e736-cb0c-496b-8cd2-f5d5d00c3562", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e780e7d6-12d1-4c79-91c4-379894bb1460", "record_id": "flaws_cloudtrail:0000488:e780e7d6-12d1-4c79-91c4-379894bb1460", "row_index": 488, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e780e7d6-12d1-4c79-91c4-379894bb1460", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811b96c1-74cd-4c8c-9d56-5d456da5649b", "record_id": "flaws_cloudtrail:0000489:811b96c1-74cd-4c8c-9d56-5d456da5649b", "row_index": 489, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811b96c1-74cd-4c8c-9d56-5d456da5649b", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b7ea0b-569b-416a-a751-ea223957b69bb", "record_id": "flaws_cloudtrail:0000490:62b7ea0b-569b-416a-a751-ea223957b69bb", "row_index": 490, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b7ea0b-569b-416a-a751-ea223957b69bb", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e942e736-cb0c-496b-8cd2-f5d5d00c3562", "record_id": "flaws_cloudtrail:0000491:e942e736-cb0c-496b-8cd2-f5d5d00c3562", "row_index": 491, "timestamp": "2019-08-16T12:27:16Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e942e736-cb0c-496b-8cd2-f5d5d00c3562", "eventTime": "2019-08-16T12:27:16Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecac982e-19fa-449c-be3e-51f854b2f7ab", "record_id": "flaws_cloudtrail:0000492:ecac982e-19fa-449c-be3e-51f854b2f7ab", "row_index": 492, "timestamp": "2019-08-16T12:27:17Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecac982e-19fa-449c-be3e-51f854b2f7ab", "eventTime": "2019-08-16T12:27:17Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "429291b9-9e91-476c-85a2-8de0a0287bdd", "record_id": "flaws_cloudtrail:0000493:429291b9-9e91-476c-85a2-8de0a0287bdd", "row_index": 493, "timestamp": "2019-08-16T12:27:17Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "429291b9-9e91-476c-85a2-8de0a0287bdd", "eventTime": "2019-08-16T12:27:17Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3c654e8-c750-48e1-8bfa-d186ea1ed98a", "record_id": "flaws_cloudtrail:0000494:e3c654e8-c750-48e1-8bfa-d186ea1ed98a", "row_index": 494, "timestamp": "2019-08-16T12:27:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3c654e8-c750-48e1-8bfa-d186ea1ed98a", "eventTime": "2019-08-16T12:27:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecac982e-19fa-449c-be3e-51f854b2f7ab", "record_id": "flaws_cloudtrail:0000495:ecac982e-19fa-449c-be3e-51f854b2f7ab", "row_index": 495, "timestamp": "2019-08-16T12:27:17Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecac982e-19fa-449c-be3e-51f854b2f7ab", "eventTime": "2019-08-16T12:27:17Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "429291b9-9e91-476c-85a2-8de0a0287bdd", "record_id": "flaws_cloudtrail:0000496:429291b9-9e91-476c-85a2-8de0a0287bdd", "row_index": 496, "timestamp": "2019-08-16T12:27:17Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "429291b9-9e91-476c-85a2-8de0a0287bdd", "eventTime": "2019-08-16T12:27:17Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3c654e8-c750-48e1-8bfa-d186ea1ed98a", "record_id": "flaws_cloudtrail:0000497:e3c654e8-c750-48e1-8bfa-d186ea1ed98a", "row_index": 497, "timestamp": "2019-08-16T12:27:17Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3c654e8-c750-48e1-8bfa-d186ea1ed98a", "eventTime": "2019-08-16T12:27:17Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63287a-65ed-4506-9c43-70701df488", "record_id": "flaws_cloudtrail:0000498:a63287a-65ed-4506-9c43-70701df488", "row_index": 498, "timestamp": "2019-08-16T12:27:18Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63287a-65ed-4506-9c43-70701df488", "eventTime": "2019-08-16T12:27:18Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1c4754-f846-4d98-97ea-1f3709f8f651", "record_id": "flaws_cloudtrail:0000499:2d1c4754-f846-4d98-97ea-1f3709f8f651", "row_index": 499, "timestamp": "2019-08-16T12:27:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1c4754-f846-4d98-97ea-1f3709f8f651", "eventTime": "2019-08-16T12:27:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "902f7176-123d-4ba1-a159-75037d027912b", "record_id": "flaws_cloudtrail:0000500:902f7176-123d-4ba1-a159-75037d027912b", "row_index": 500, "timestamp": "2019-08-16T12:27:18Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "902f7176-123d-4ba1-a159-75037d027912b", "eventTime": "2019-08-16T12:27:18Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63287a-65ed-4506-9c43-70701df488", "record_id": "flaws_cloudtrail:0000501:a63287a-65ed-4506-9c43-70701df488", "row_index": 501, "timestamp": "2019-08-16T12:27:18Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63287a-65ed-4506-9c43-70701df488", "eventTime": "2019-08-16T12:27:18Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1c4754-f846-4d98-97ea-1f3709f8f651", "record_id": "flaws_cloudtrail:0000502:2d1c4754-f846-4d98-97ea-1f3709f8f651", "row_index": 502, "timestamp": "2019-08-16T12:27:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1c4754-f846-4d98-97ea-1f3709f8f651", "eventTime": "2019-08-16T12:27:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "902f7176-123d-4ba1-a159-75037d027912b", "record_id": "flaws_cloudtrail:0000503:902f7176-123d-4ba1-a159-75037d027912b", "row_index": 503, "timestamp": "2019-08-16T12:27:18Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "902f7176-123d-4ba1-a159-75037d027912b", "eventTime": "2019-08-16T12:27:18Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65a798b9-300d-418a-9525-6e70b6d1a79a", "record_id": "flaws_cloudtrail:0000504:65a798b9-300d-418a-9525-6e70b6d1a79a", "row_index": 504, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65a798b9-300d-418a-9525-6e70b6d1a79a", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc653cf-3197-49d6-80f0-93a284abc73b", "record_id": "flaws_cloudtrail:0000505:2bc653cf-3197-49d6-80f0-93a284abc73b", "row_index": 505, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc653cf-3197-49d6-80f0-93a284abc73b", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070d3d8a-08b0-4f93-89c7-0b46a2e57319", "record_id": "flaws_cloudtrail:0000506:070d3d8a-08b0-4f93-89c7-0b46a2e57319", "row_index": 506, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070d3d8a-08b0-4f93-89c7-0b46a2e57319", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e19a475-3dd6-4236-ab12-18e5e348be3c", "record_id": "flaws_cloudtrail:0000507:7e19a475-3dd6-4236-ab12-18e5e348be3c", "row_index": 507, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e19a475-3dd6-4236-ab12-18e5e348be3c", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65a798b9-300d-418a-9525-6e70b6d1a79a", "record_id": "flaws_cloudtrail:0000508:65a798b9-300d-418a-9525-6e70b6d1a79a", "row_index": 508, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65a798b9-300d-418a-9525-6e70b6d1a79a", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc653cf-3197-49d6-80f0-93a284abc73b", "record_id": "flaws_cloudtrail:0000509:2bc653cf-3197-49d6-80f0-93a284abc73b", "row_index": 509, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc653cf-3197-49d6-80f0-93a284abc73b", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070d3d8a-08b0-4f93-89c7-0b46a2e57319", "record_id": "flaws_cloudtrail:0000510:070d3d8a-08b0-4f93-89c7-0b46a2e57319", "row_index": 510, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070d3d8a-08b0-4f93-89c7-0b46a2e57319", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e19a475-3dd6-4236-ab12-18e5e348be3c", "record_id": "flaws_cloudtrail:0000511:7e19a475-3dd6-4236-ab12-18e5e348be3c", "row_index": 511, "timestamp": "2019-08-16T12:27:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e19a475-3dd6-4236-ab12-18e5e348be3c", "eventTime": "2019-08-16T12:27:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a87b7a-277a-4175-88ed-437b0e83f9fe", "record_id": "flaws_cloudtrail:0000512:52a87b7a-277a-4175-88ed-437b0e83f9fe", "row_index": 512, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a87b7a-277a-4175-88ed-437b0e83f9fe", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edbeb80-982c-4a06-9b14-1f315e142644", "record_id": "flaws_cloudtrail:0000513:4edbeb80-982c-4a06-9b14-1f315e142644", "row_index": 513, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edbeb80-982c-4a06-9b14-1f315e142644", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b048db72-2303-4fc9-9e27-f2cf9b29dc91", "record_id": "flaws_cloudtrail:0000514:b048db72-2303-4fc9-9e27-f2cf9b29dc91", "row_index": 514, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b048db72-2303-4fc9-9e27-f2cf9b29dc91", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3d7b7e-cd19-4995-a4a0-351de0beb828", "record_id": "flaws_cloudtrail:0000515:ea3d7b7e-cd19-4995-a4a0-351de0beb828", "row_index": 515, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3d7b7e-cd19-4995-a4a0-351de0beb828", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f09f97f-6537-4f4d-a252-372b2ff9d8e1", "record_id": "flaws_cloudtrail:0000516:8f09f97f-6537-4f4d-a252-372b2ff9d8e1", "row_index": 516, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f09f97f-6537-4f4d-a252-372b2ff9d8e1", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec0c8249-4465-4969-a94f-c9efef34c5e4", "record_id": "flaws_cloudtrail:0000517:ec0c8249-4465-4969-a94f-c9efef34c5e4", "row_index": 517, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec0c8249-4465-4969-a94f-c9efef34c5e4", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875ba96e-073b-44b7-9771-1637d17c19c9", "record_id": "flaws_cloudtrail:0000518:875ba96e-073b-44b7-9771-1637d17c19c9", "row_index": 518, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875ba96e-073b-44b7-9771-1637d17c19c9", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892838-0029-4006-8b3f-66255a325b07", "record_id": "flaws_cloudtrail:0000519:892838-0029-4006-8b3f-66255a325b07", "row_index": 519, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892838-0029-4006-8b3f-66255a325b07", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a87b7a-277a-4175-88ed-437b0e83f9fe", "record_id": "flaws_cloudtrail:0000520:52a87b7a-277a-4175-88ed-437b0e83f9fe", "row_index": 520, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a87b7a-277a-4175-88ed-437b0e83f9fe", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edbeb80-982c-4a06-9b14-1f315e142644", "record_id": "flaws_cloudtrail:0000521:4edbeb80-982c-4a06-9b14-1f315e142644", "row_index": 521, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edbeb80-982c-4a06-9b14-1f315e142644", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b048db72-2303-4fc9-9e27-f2cf9b29dc91", "record_id": "flaws_cloudtrail:0000522:b048db72-2303-4fc9-9e27-f2cf9b29dc91", "row_index": 522, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b048db72-2303-4fc9-9e27-f2cf9b29dc91", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3d7b7e-cd19-4995-a4a0-351de0beb828", "record_id": "flaws_cloudtrail:0000523:ea3d7b7e-cd19-4995-a4a0-351de0beb828", "row_index": 523, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3d7b7e-cd19-4995-a4a0-351de0beb828", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f09f97f-6537-4f4d-a252-372b2ff9d8e1", "record_id": "flaws_cloudtrail:0000524:8f09f97f-6537-4f4d-a252-372b2ff9d8e1", "row_index": 524, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f09f97f-6537-4f4d-a252-372b2ff9d8e1", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec0c8249-4465-4969-a94f-c9efef34c5e4", "record_id": "flaws_cloudtrail:0000525:ec0c8249-4465-4969-a94f-c9efef34c5e4", "row_index": 525, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec0c8249-4465-4969-a94f-c9efef34c5e4", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875ba96e-073b-44b7-9771-1637d17c19c9", "record_id": "flaws_cloudtrail:0000526:875ba96e-073b-44b7-9771-1637d17c19c9", "row_index": 526, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875ba96e-073b-44b7-9771-1637d17c19c9", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892838-0029-4006-8b3f-66255a325b07", "record_id": "flaws_cloudtrail:0000527:892838-0029-4006-8b3f-66255a325b07", "row_index": 527, "timestamp": "2019-08-16T12:27:20Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892838-0029-4006-8b3f-66255a325b07", "eventTime": "2019-08-16T12:27:20Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55d0d4a-9d1e-4d9b-bf6f-4986845a0854", "record_id": "flaws_cloudtrail:0000528:b55d0d4a-9d1e-4d9b-bf6f-4986845a0854", "row_index": 528, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55d0d4a-9d1e-4d9b-bf6f-4986845a0854", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716430f5-5415-4898-ae0b-32a5f2dc6fde", "record_id": "flaws_cloudtrail:0000529:716430f5-5415-4898-ae0b-32a5f2dc6fde", "row_index": 529, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716430f5-5415-4898-ae0b-32a5f2dc6fde", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4807ae3e-fb5b-4632-94a5-a7ab12708a75", "record_id": "flaws_cloudtrail:0000530:4807ae3e-fb5b-4632-94a5-a7ab12708a75", "row_index": 530, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4807ae3e-fb5b-4632-94a5-a7ab12708a75", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e512bd6f-a0aa-42e4-ba54-0b82af83040", "record_id": "flaws_cloudtrail:0000531:e512bd6f-a0aa-42e4-ba54-0b82af83040", "row_index": 531, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e512bd6f-a0aa-42e4-ba54-0b82af83040", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dedc20a-93d6-4fe9-8c34-97da9a162f70", "record_id": "flaws_cloudtrail:0000532:5dedc20a-93d6-4fe9-8c34-97da9a162f70", "row_index": 532, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dedc20a-93d6-4fe9-8c34-97da9a162f70", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21bd0401-fe70-4e28-802d-e83b8d75a0e4", "record_id": "flaws_cloudtrail:0000533:21bd0401-fe70-4e28-802d-e83b8d75a0e4", "row_index": 533, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21bd0401-fe70-4e28-802d-e83b8d75a0e4", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55d0d4a-9d1e-4d9b-bf6f-4986845a0854", "record_id": "flaws_cloudtrail:0000534:b55d0d4a-9d1e-4d9b-bf6f-4986845a0854", "row_index": 534, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55d0d4a-9d1e-4d9b-bf6f-4986845a0854", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716430f5-5415-4898-ae0b-32a5f2dc6fde", "record_id": "flaws_cloudtrail:0000535:716430f5-5415-4898-ae0b-32a5f2dc6fde", "row_index": 535, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716430f5-5415-4898-ae0b-32a5f2dc6fde", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4807ae3e-fb5b-4632-94a5-a7ab12708a75", "record_id": "flaws_cloudtrail:0000536:4807ae3e-fb5b-4632-94a5-a7ab12708a75", "row_index": 536, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4807ae3e-fb5b-4632-94a5-a7ab12708a75", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e512bd6f-a0aa-42e4-ba54-0b82af83040", "record_id": "flaws_cloudtrail:0000537:e512bd6f-a0aa-42e4-ba54-0b82af83040", "row_index": 537, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e512bd6f-a0aa-42e4-ba54-0b82af83040", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dedc20a-93d6-4fe9-8c34-97da9a162f70", "record_id": "flaws_cloudtrail:0000538:5dedc20a-93d6-4fe9-8c34-97da9a162f70", "row_index": 538, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dedc20a-93d6-4fe9-8c34-97da9a162f70", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21bd0401-fe70-4e28-802d-e83b8d75a0e4", "record_id": "flaws_cloudtrail:0000539:21bd0401-fe70-4e28-802d-e83b8d75a0e4", "row_index": 539, "timestamp": "2019-08-16T12:27:21Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21bd0401-fe70-4e28-802d-e83b8d75a0e4", "eventTime": "2019-08-16T12:27:21Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb3ec9c-3c4d-434f-b979-a37671a8696d", "record_id": "flaws_cloudtrail:0000540:cfb3ec9c-3c4d-434f-b979-a37671a8696d", "row_index": 540, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb3ec9c-3c4d-434f-b979-a37671a8696d", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22965b-28a1-4529-a5f5-2cf1c665682", "record_id": "flaws_cloudtrail:0000541:c22965b-28a1-4529-a5f5-2cf1c665682", "row_index": 541, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22965b-28a1-4529-a5f5-2cf1c665682", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d72f1eb-ae71-42fe-9984-43ed5ecab98b", "record_id": "flaws_cloudtrail:0000542:3d72f1eb-ae71-42fe-9984-43ed5ecab98b", "row_index": 542, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d72f1eb-ae71-42fe-9984-43ed5ecab98b", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79768e8f-4280-4eb0-b71b-2e547a906b9d", "record_id": "flaws_cloudtrail:0000543:79768e8f-4280-4eb0-b71b-2e547a906b9d", "row_index": 543, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79768e8f-4280-4eb0-b71b-2e547a906b9d", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa52672-48c4-47ed-8c23-a1d0c912c32d", "record_id": "flaws_cloudtrail:0000544:daa52672-48c4-47ed-8c23-a1d0c912c32d", "row_index": 544, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa52672-48c4-47ed-8c23-a1d0c912c32d", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1555ff7-7a07-4334-b1ba-b7312aa2e88a", "record_id": "flaws_cloudtrail:0000545:e1555ff7-7a07-4334-b1ba-b7312aa2e88a", "row_index": 545, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1555ff7-7a07-4334-b1ba-b7312aa2e88a", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26990-b1dd-41c7-b8f5-0d42b225219f2", "record_id": "flaws_cloudtrail:0000546:f26990-b1dd-41c7-b8f5-0d42b225219f2", "row_index": 546, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26990-b1dd-41c7-b8f5-0d42b225219f2", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b5df2c6-c632-4f30-aa1e-5b47625fab4b", "record_id": "flaws_cloudtrail:0000547:0b5df2c6-c632-4f30-aa1e-5b47625fab4b", "row_index": 547, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b5df2c6-c632-4f30-aa1e-5b47625fab4b", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb3ec9c-3c4d-434f-b979-a37671a8696d", "record_id": "flaws_cloudtrail:0000548:cfb3ec9c-3c4d-434f-b979-a37671a8696d", "row_index": 548, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb3ec9c-3c4d-434f-b979-a37671a8696d", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22965b-28a1-4529-a5f5-2cf1c665682", "record_id": "flaws_cloudtrail:0000549:c22965b-28a1-4529-a5f5-2cf1c665682", "row_index": 549, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22965b-28a1-4529-a5f5-2cf1c665682", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d72f1eb-ae71-42fe-9984-43ed5ecab98b", "record_id": "flaws_cloudtrail:0000550:3d72f1eb-ae71-42fe-9984-43ed5ecab98b", "row_index": 550, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d72f1eb-ae71-42fe-9984-43ed5ecab98b", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79768e8f-4280-4eb0-b71b-2e547a906b9d", "record_id": "flaws_cloudtrail:0000551:79768e8f-4280-4eb0-b71b-2e547a906b9d", "row_index": 551, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79768e8f-4280-4eb0-b71b-2e547a906b9d", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa52672-48c4-47ed-8c23-a1d0c912c32d", "record_id": "flaws_cloudtrail:0000552:daa52672-48c4-47ed-8c23-a1d0c912c32d", "row_index": 552, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa52672-48c4-47ed-8c23-a1d0c912c32d", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1555ff7-7a07-4334-b1ba-b7312aa2e88a", "record_id": "flaws_cloudtrail:0000553:e1555ff7-7a07-4334-b1ba-b7312aa2e88a", "row_index": 553, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1555ff7-7a07-4334-b1ba-b7312aa2e88a", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26990-b1dd-41c7-b8f5-0d42b225219f2", "record_id": "flaws_cloudtrail:0000554:f26990-b1dd-41c7-b8f5-0d42b225219f2", "row_index": 554, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26990-b1dd-41c7-b8f5-0d42b225219f2", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b5df2c6-c632-4f30-aa1e-5b47625fab4b", "record_id": "flaws_cloudtrail:0000555:0b5df2c6-c632-4f30-aa1e-5b47625fab4b", "row_index": 555, "timestamp": "2019-08-16T12:27:22Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b5df2c6-c632-4f30-aa1e-5b47625fab4b", "eventTime": "2019-08-16T12:27:22Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47c7c06-9c44-4a6e-bc3b-4875c1ea9cb2", "record_id": "flaws_cloudtrail:0000556:a47c7c06-9c44-4a6e-bc3b-4875c1ea9cb2", "row_index": 556, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47c7c06-9c44-4a6e-bc3b-4875c1ea9cb2", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "310a9be6-2d98-42f7-8243-c728e9c636d9", "record_id": "flaws_cloudtrail:0000557:310a9be6-2d98-42f7-8243-c728e9c636d9", "row_index": 557, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "310a9be6-2d98-42f7-8243-c728e9c636d9", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35763e0b-d41f-423b-b227-ef316dfc2544", "record_id": "flaws_cloudtrail:0000558:35763e0b-d41f-423b-b227-ef316dfc2544", "row_index": 558, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35763e0b-d41f-423b-b227-ef316dfc2544", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4763a4dd-7899-489f-be83-0c78c524a9e8", "record_id": "flaws_cloudtrail:0000559:4763a4dd-7899-489f-be83-0c78c524a9e8", "row_index": 559, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4763a4dd-7899-489f-be83-0c78c524a9e8", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a47c7c06-9c44-4a6e-bc3b-4875c1ea9cb2", "record_id": "flaws_cloudtrail:0000560:a47c7c06-9c44-4a6e-bc3b-4875c1ea9cb2", "row_index": 560, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a47c7c06-9c44-4a6e-bc3b-4875c1ea9cb2", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "310a9be6-2d98-42f7-8243-c728e9c636d9", "record_id": "flaws_cloudtrail:0000561:310a9be6-2d98-42f7-8243-c728e9c636d9", "row_index": 561, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "310a9be6-2d98-42f7-8243-c728e9c636d9", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35763e0b-d41f-423b-b227-ef316dfc2544", "record_id": "flaws_cloudtrail:0000562:35763e0b-d41f-423b-b227-ef316dfc2544", "row_index": 562, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35763e0b-d41f-423b-b227-ef316dfc2544", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4763a4dd-7899-489f-be83-0c78c524a9e8", "record_id": "flaws_cloudtrail:0000563:4763a4dd-7899-489f-be83-0c78c524a9e8", "row_index": 563, "timestamp": "2019-08-16T12:27:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4763a4dd-7899-489f-be83-0c78c524a9e8", "eventTime": "2019-08-16T12:27:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d47564-a338-4806-af4b-1cbbfd14844c", "record_id": "flaws_cloudtrail:0000564:e5d47564-a338-4806-af4b-1cbbfd14844c", "row_index": 564, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d47564-a338-4806-af4b-1cbbfd14844c", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2e59a6-3733-4991-9812-35166b9014ed", "record_id": "flaws_cloudtrail:0000565:6b2e59a6-3733-4991-9812-35166b9014ed", "row_index": 565, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2e59a6-3733-4991-9812-35166b9014ed", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac869b60-85bb-4ef0-8d9a-faae1b469a0c", "record_id": "flaws_cloudtrail:0000566:ac869b60-85bb-4ef0-8d9a-faae1b469a0c", "row_index": 566, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac869b60-85bb-4ef0-8d9a-faae1b469a0c", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e542a4ed-5e79-444c-a15f-53666ea767da", "record_id": "flaws_cloudtrail:0000567:e542a4ed-5e79-444c-a15f-53666ea767da", "row_index": 567, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e542a4ed-5e79-444c-a15f-53666ea767da", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0205b919-cf23-4e4d-b823-49e7bfe296225", "record_id": "flaws_cloudtrail:0000568:0205b919-cf23-4e4d-b823-49e7bfe296225", "row_index": 568, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0205b919-cf23-4e4d-b823-49e7bfe296225", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bfbf746-8a79-4288-9855-e0ed91a237254", "record_id": "flaws_cloudtrail:0000569:4bfbf746-8a79-4288-9855-e0ed91a237254", "row_index": 569, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bfbf746-8a79-4288-9855-e0ed91a237254", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d47564-a338-4806-af4b-1cbbfd14844c", "record_id": "flaws_cloudtrail:0000570:e5d47564-a338-4806-af4b-1cbbfd14844c", "row_index": 570, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d47564-a338-4806-af4b-1cbbfd14844c", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2e59a6-3733-4991-9812-35166b9014ed", "record_id": "flaws_cloudtrail:0000571:6b2e59a6-3733-4991-9812-35166b9014ed", "row_index": 571, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2e59a6-3733-4991-9812-35166b9014ed", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac869b60-85bb-4ef0-8d9a-faae1b469a0c", "record_id": "flaws_cloudtrail:0000572:ac869b60-85bb-4ef0-8d9a-faae1b469a0c", "row_index": 572, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac869b60-85bb-4ef0-8d9a-faae1b469a0c", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e542a4ed-5e79-444c-a15f-53666ea767da", "record_id": "flaws_cloudtrail:0000573:e542a4ed-5e79-444c-a15f-53666ea767da", "row_index": 573, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e542a4ed-5e79-444c-a15f-53666ea767da", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0205b919-cf23-4e4d-b823-49e7bfe296225", "record_id": "flaws_cloudtrail:0000574:0205b919-cf23-4e4d-b823-49e7bfe296225", "row_index": 574, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0205b919-cf23-4e4d-b823-49e7bfe296225", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bfbf746-8a79-4288-9855-e0ed91a237254", "record_id": "flaws_cloudtrail:0000575:4bfbf746-8a79-4288-9855-e0ed91a237254", "row_index": 575, "timestamp": "2019-08-16T12:27:24Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bfbf746-8a79-4288-9855-e0ed91a237254", "eventTime": "2019-08-16T12:27:24Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e645889db-4d66-472d-95c2-b91766e497", "record_id": "flaws_cloudtrail:0000576:e645889db-4d66-472d-95c2-b91766e497", "row_index": 576, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e645889db-4d66-472d-95c2-b91766e497", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d3e884b-63e7-461c-8924-3e73a3fe9192", "record_id": "flaws_cloudtrail:0000577:4d3e884b-63e7-461c-8924-3e73a3fe9192", "row_index": 577, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d3e884b-63e7-461c-8924-3e73a3fe9192", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2b12be-8b4d-4083-b422-8a77409c54fc", "record_id": "flaws_cloudtrail:0000578:ed2b12be-8b4d-4083-b422-8a77409c54fc", "row_index": 578, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2b12be-8b4d-4083-b422-8a77409c54fc", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a04d3d-aee8-4c62-b1bf-c80bec059833", "record_id": "flaws_cloudtrail:0000579:80a04d3d-aee8-4c62-b1bf-c80bec059833", "row_index": 579, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a04d3d-aee8-4c62-b1bf-c80bec059833", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34015ae-a4f1-4992-be36-7d787ef420568", "record_id": "flaws_cloudtrail:0000580:34015ae-a4f1-4992-be36-7d787ef420568", "row_index": 580, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34015ae-a4f1-4992-be36-7d787ef420568", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e645889db-4d66-472d-95c2-b91766e497", "record_id": "flaws_cloudtrail:0000581:e645889db-4d66-472d-95c2-b91766e497", "row_index": 581, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeLaunchTemplates", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e645889db-4d66-472d-95c2-b91766e497", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeLaunchTemplates", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeLaunchTemplatesRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d3e884b-63e7-461c-8924-3e73a3fe9192", "record_id": "flaws_cloudtrail:0000582:4d3e884b-63e7-461c-8924-3e73a3fe9192", "row_index": 582, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d3e884b-63e7-461c-8924-3e73a3fe9192", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed2b12be-8b4d-4083-b422-8a77409c54fc", "record_id": "flaws_cloudtrail:0000583:ed2b12be-8b4d-4083-b422-8a77409c54fc", "row_index": 583, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed2b12be-8b4d-4083-b422-8a77409c54fc", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a04d3d-aee8-4c62-b1bf-c80bec059833", "record_id": "flaws_cloudtrail:0000584:80a04d3d-aee8-4c62-b1bf-c80bec059833", "row_index": 584, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a04d3d-aee8-4c62-b1bf-c80bec059833", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34015ae-a4f1-4992-be36-7d787ef420568", "record_id": "flaws_cloudtrail:0000585:34015ae-a4f1-4992-be36-7d787ef420568", "row_index": 585, "timestamp": "2019-08-16T12:27:25Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34015ae-a4f1-4992-be36-7d787ef420568", "eventTime": "2019-08-16T12:27:25Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faac7935-03c5-4649-a34e-270d498d211b", "record_id": "flaws_cloudtrail:0000586:faac7935-03c5-4649-a34e-270d498d211b", "row_index": 586, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faac7935-03c5-4649-a34e-270d498d211b", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d68c8da8-ea14-479d-969e-5654864cbc78", "record_id": "flaws_cloudtrail:0000587:d68c8da8-ea14-479d-969e-5654864cbc78", "row_index": 587, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d68c8da8-ea14-479d-969e-5654864cbc78", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25fadd0-e55b-4452-949f-291090f789c4", "record_id": "flaws_cloudtrail:0000588:f25fadd0-e55b-4452-949f-291090f789c4", "row_index": 588, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25fadd0-e55b-4452-949f-291090f789c4", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f0b6f50-28da-467a-b591-217d88266fd", "record_id": "flaws_cloudtrail:0000589:5f0b6f50-28da-467a-b591-217d88266fd", "row_index": 589, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f0b6f50-28da-467a-b591-217d88266fd", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25114b15-55e7-4476-bda5-16838c4f9e", "record_id": "flaws_cloudtrail:0000590:25114b15-55e7-4476-bda5-16838c4f9e", "row_index": 590, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25114b15-55e7-4476-bda5-16838c4f9e", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "661b4776-1e48-4e51-b1eb-ccb02b1963b4", "record_id": "flaws_cloudtrail:0000591:661b4776-1e48-4e51-b1eb-ccb02b1963b4", "row_index": 591, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "661b4776-1e48-4e51-b1eb-ccb02b1963b4", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faac7935-03c5-4649-a34e-270d498d211b", "record_id": "flaws_cloudtrail:0000592:faac7935-03c5-4649-a34e-270d498d211b", "row_index": 592, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faac7935-03c5-4649-a34e-270d498d211b", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d68c8da8-ea14-479d-969e-5654864cbc78", "record_id": "flaws_cloudtrail:0000593:d68c8da8-ea14-479d-969e-5654864cbc78", "row_index": 593, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d68c8da8-ea14-479d-969e-5654864cbc78", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25fadd0-e55b-4452-949f-291090f789c4", "record_id": "flaws_cloudtrail:0000594:f25fadd0-e55b-4452-949f-291090f789c4", "row_index": 594, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25fadd0-e55b-4452-949f-291090f789c4", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f0b6f50-28da-467a-b591-217d88266fd", "record_id": "flaws_cloudtrail:0000595:5f0b6f50-28da-467a-b591-217d88266fd", "row_index": 595, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f0b6f50-28da-467a-b591-217d88266fd", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25114b15-55e7-4476-bda5-16838c4f9e", "record_id": "flaws_cloudtrail:0000596:25114b15-55e7-4476-bda5-16838c4f9e", "row_index": 596, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25114b15-55e7-4476-bda5-16838c4f9e", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {"MaxResults": 500}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "661b4776-1e48-4e51-b1eb-ccb02b1963b4", "record_id": "flaws_cloudtrail:0000597:661b4776-1e48-4e51-b1eb-ccb02b1963b4", "row_index": 597, "timestamp": "2019-08-16T12:27:26Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "661b4776-1e48-4e51-b1eb-ccb02b1963b4", "eventTime": "2019-08-16T12:27:26Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99502d-8061-4d5e-b1ad-317a7f7b2161", "record_id": "flaws_cloudtrail:0000598:99502d-8061-4d5e-b1ad-317a7f7b2161", "row_index": 598, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99502d-8061-4d5e-b1ad-317a7f7b2161", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1ede2cd-74d1-44d7-ae7e-d1edba3e1b0b", "record_id": "flaws_cloudtrail:0000599:a1ede2cd-74d1-44d7-ae7e-d1edba3e1b0b", "row_index": 599, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1ede2cd-74d1-44d7-ae7e-d1edba3e1b0b", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e208bce0-21cd-4ff9-aa65-0ea7d7909ae3", "record_id": "flaws_cloudtrail:0000600:e208bce0-21cd-4ff9-aa65-0ea7d7909ae3", "row_index": 600, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e208bce0-21cd-4ff9-aa65-0ea7d7909ae3", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5148c1a-1e01-45c0-a371-f5cc9d40370c", "record_id": "flaws_cloudtrail:0000601:b5148c1a-1e01-45c0-a371-f5cc9d40370c", "row_index": 601, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5148c1a-1e01-45c0-a371-f5cc9d40370c", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5e3e11a-8359-46d3-85cb-60d1762b40fb", "record_id": "flaws_cloudtrail:0000602:f5e3e11a-8359-46d3-85cb-60d1762b40fb", "row_index": 602, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5e3e11a-8359-46d3-85cb-60d1762b40fb", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeVpcEndpointsRequest": {"MaxResults": 1000}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f5a1fe7-d360-4e95-9786-f3ac1c45198", "record_id": "flaws_cloudtrail:0000603:9f5a1fe7-d360-4e95-9786-f3ac1c45198", "row_index": 603, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f5a1fe7-d360-4e95-9786-f3ac1c45198", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99502d-8061-4d5e-b1ad-317a7f7b2161", "record_id": "flaws_cloudtrail:0000604:99502d-8061-4d5e-b1ad-317a7f7b2161", "row_index": 604, "timestamp": "2019-08-16T12:27:27Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "129.5.8.15", "user_agent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99502d-8061-4d5e-b1ad-317a7f7b2161", "eventTime": "2019-08-16T12:27:27Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "129.5.8.15", "userAgent": "Boto3/1.7.61 Python/3.5.0 Windows/ Botocore/1.10.62", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}