Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "993294-449f-45cc-8838-5c0712b376814", "record_id": "flaws_cloudtrail:0000000:993294-449f-45cc-8838-5c0712b376814", "row_index": 0, "timestamp": "2019-05-15T09:25:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "993294-449f-45cc-8838-5c0712b376814", "eventTime": "2019-05-15T09:25:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaTm0ybUpuSHRGdlpaekVwdU8ySkF3ek5UckVmTWJNY2FwQXhaVjR4VWdtMUhETEdLNFJRUUpxdVlmOGNHOFVzdy9CQkdsU3RIT2lCQ0VpUUVjY0loWUZ5QWJ6eUdDZkJlR2ZVbytWaWhPRStubmhEbVlkTytHUWwxRE5hdEZKcU9QdGkyLzAxeVBERkd4UkJxM1AwbGRlSEVHK1BFNEw2Q21kK1lNY1ZzV3ZZZG5Ha01ITWJtOG1jNzlNb0NkSGxYcXo5eFdwaFcybEhHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "432fbc6e-cfd6-45a3-95c6-f49abbd9b959", "record_id": "flaws_cloudtrail:0000001:432fbc6e-cfd6-45a3-95c6-f49abbd9b959", "row_index": 1, "timestamp": "2019-05-15T09:25:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "432fbc6e-cfd6-45a3-95c6-f49abbd9b959", "eventTime": "2019-05-15T09:25:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTVGtHVk9WRm5XNkZzNTQvNUhiWTBGbU1nbmdPYWR2Vk4zMmhEcHdMemR3U2JnY09vdHpLWEkxaUVPc0hSMkNIc29sNUsvWEs3a0lvdVBaaXJ3a0tPSWFTWWpBMlpocUNoNzJxdEVyT0N1Yjc2YjJ6UHFqaFFEWTN0eEFSVUMwNld3OEFHa3JQTS84ZGlkY2t4QnNkbHYwMzRWYVgzRVNtM2Rjb1RuMEFYVkYzY085R2d6Tis3bFZURnpnb2dqTURZMFJ4eEcvRCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "432fbc6e-cfd6-45a3-95c6-f49abbd9b959", "record_id": "flaws_cloudtrail:0000002:432fbc6e-cfd6-45a3-95c6-f49abbd9b959", "row_index": 2, "timestamp": "2019-05-15T09:25:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "432fbc6e-cfd6-45a3-95c6-f49abbd9b959", "eventTime": "2019-05-15T09:25:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTVGtHVk9WRm5XNkZzNTQvNUhiWTBGbU1nbmdPYWR2Vk4zMmhEcHdMemR3U2JnY09vdHpLWEkxaUVPc0hSMkNIc29sNUsvWEs3a0lvdVBaaXJ3a0tPSWFTWWpBMlpocUNoNzJxdEVyT0N1Yjc2YjJ6UHFqaFFEWTN0eEFSVUMwNld3OEFHa3JQTS84ZGlkY2t4QnNkbHYwMzRWYVgzRVNtM2Rjb1RuMEFYVkYzY085R2d6Tis3bFZURnpnb2dqTURZMFJ4eEcvRCIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8906f8e1-318d-4558-8ec4-7014bf83228d", "record_id": "flaws_cloudtrail:0000003:8906f8e1-318d-4558-8ec4-7014bf83228d", "row_index": 3, "timestamp": "2019-05-15T09:25:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8906f8e1-318d-4558-8ec4-7014bf83228d", "eventTime": "2019-05-15T09:25:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2SjlPQnA3WXQyM2IxS1N6Qm8vTmtBRG1UQnRaSUgzSzhxbjZFaGlIcmxldk82dHVFU3V4dGNTRjRhd1pYMjVxYzNKbUxMc01FOHRQc2swYjdIWlhMdXNxZXQwOE1TOXFzSHhRVmRTVXErQ3g2M1N5M2VsaHpuc1BTOHFPK2hxYjRvak8xYjY3d3AvNktvbS96VkZ1QjVXWjRzem1RVHBLeWpXR0lYVEdyR25ZOTVtQmoxblBVY0ZvbHQwQzVuTmRaNXV3WS94UVY5UkhKUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8906f8e1-318d-4558-8ec4-7014bf83228d", "record_id": "flaws_cloudtrail:0000004:8906f8e1-318d-4558-8ec4-7014bf83228d", "row_index": 4, "timestamp": "2019-05-15T09:25:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8906f8e1-318d-4558-8ec4-7014bf83228d", "eventTime": "2019-05-15T09:25:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2SjlPQnA3WXQyM2IxS1N6Qm8vTmtBRG1UQnRaSUgzSzhxbjZFaGlIcmxldk82dHVFU3V4dGNTRjRhd1pYMjVxYzNKbUxMc01FOHRQc2swYjdIWlhMdXNxZXQwOE1TOXFzSHhRVmRTVXErQ3g2M1N5M2VsaHpuc1BTOHFPK2hxYjRvak8xYjY3d3AvNktvbS96VkZ1QjVXWjRzem1RVHBLeWpXR0lYVEdyR25ZOTVtQmoxblBVY0ZvbHQwQzVuTmRaNXV3WS94UVY5UkhKUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe91b29-9dbc-480b-aec9-cf0a8b1c3400", "record_id": "flaws_cloudtrail:0000005:4fe91b29-9dbc-480b-aec9-cf0a8b1c3400", "row_index": 5, "timestamp": "2019-05-15T09:25:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe91b29-9dbc-480b-aec9-cf0a8b1c3400", "eventTime": "2019-05-15T09:25:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoclZPaFdxS3d5b2g2TFRLVlNoMUhaYmZXTWUwRllRMTJ5RlRwSXdkTjhOd1BIbFplT2hZenh1Q1VvdDhZRlVUUDRFK1N0cmE0UDd3bDBndG5ybkQ4WkVpUEt1WTA5RmRDbGt2SkhmdCtDRlZSTnBIcFd5REU3RG4yRklpUi9PR3JvcHdxNjJ3enk4eXd3RWJaejRKUkh5MjJFSWh1Lzd3UUhPVTN2L3VDVHJkTkovTHJ0bkhmcm1JM3h2YnBPOUcwZWhpelJGaUNsND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe91b29-9dbc-480b-aec9-cf0a8b1c3400", "record_id": "flaws_cloudtrail:0000006:4fe91b29-9dbc-480b-aec9-cf0a8b1c3400", "row_index": 6, "timestamp": "2019-05-15T09:25:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe91b29-9dbc-480b-aec9-cf0a8b1c3400", "eventTime": "2019-05-15T09:25:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoclZPaFdxS3d5b2g2TFRLVlNoMUhaYmZXTWUwRllRMTJ5RlRwSXdkTjhOd1BIbFplT2hZenh1Q1VvdDhZRlVUUDRFK1N0cmE0UDd3bDBndG5ybkQ4WkVpUEt1WTA5RmRDbGt2SkhmdCtDRlZSTnBIcFd5REU3RG4yRklpUi9PR3JvcHdxNjJ3enk4eXd3RWJaejRKUkh5MjJFSWh1Lzd3UUhPVTN2L3VDVHJkTkovTHJ0bkhmcm1JM3h2YnBPOUcwZWhpelJGaUNsND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "467585f2-8092-44fd-b14e-a746bcbeec72", "record_id": "flaws_cloudtrail:0000007:467585f2-8092-44fd-b14e-a746bcbeec72", "row_index": 7, "timestamp": "2019-05-15T09:25:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "467585f2-8092-44fd-b14e-a746bcbeec72", "eventTime": "2019-05-15T09:25:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJERHVCc3pxNk5BTkpBZzJSRGNINHA3YjJrR25PTmswRmVpZnVZUlBZVUpZdWREYjhlL2ZNYUNTSjJCM2grc294empHWStzcGVuUnlRMFRIVXg4U3dlUjVNdWtDZFRqdm5YTDB1b1FtWmhlNjU1aDZRTXJVdFFyQUdQbGhkTkNBYmRRMTBUbEhaNWFNbjhKMTFSUHZIcmM3U1R2aWp6cWkzVUROOVZSUFF5MFo3SjNrWEpKY0docDNaU0c3NjdWWGpDTVpJTFNzOFh3ZnZxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "467585f2-8092-44fd-b14e-a746bcbeec72", "record_id": "flaws_cloudtrail:0000008:467585f2-8092-44fd-b14e-a746bcbeec72", "row_index": 8, "timestamp": "2019-05-15T09:25:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "467585f2-8092-44fd-b14e-a746bcbeec72", "eventTime": "2019-05-15T09:25:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJERHVCc3pxNk5BTkpBZzJSRGNINHA3YjJrR25PTmswRmVpZnVZUlBZVUpZdWREYjhlL2ZNYUNTSjJCM2grc294empHWStzcGVuUnlRMFRIVXg4U3dlUjVNdWtDZFRqdm5YTDB1b1FtWmhlNjU1aDZRTXJVdFFyQUdQbGhkTkNBYmRRMTBUbEhaNWFNbjhKMTFSUHZIcmM3U1R2aWp6cWkzVUROOVZSUFF5MFo3SjNrWEpKY0docDNaU0c3NjdWWGpDTVpJTFNzOFh3ZnZxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0da029-c776-4e0b-b2d7-4324c54288aa", "record_id": "flaws_cloudtrail:0000009:1a0da029-c776-4e0b-b2d7-4324c54288aa", "row_index": 9, "timestamp": "2019-05-15T09:25:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0da029-c776-4e0b-b2d7-4324c54288aa", "eventTime": "2019-05-15T09:25:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdWhzRnB0WGV0bndoSGhxWC9xWlk0bFNNTDRmYU1QaFBuZWNxclNoYWt6MzF3bzdRNFlobXpIUmJHVHRxUXZneFM3Y21sYnBYMExLVjNtOEg2RFBVYk5iRzdURHEyckJ4SWpTcmlNTFRFUFNlZTlVVE4va1l5WkJkc2M5L2dZVlRLZ1ovUGxhU1ZZNGNSb1I0aVZqY2J5REFxUkNXeU5KTVAyWVd5SGpTVGZNcGpkcXhlaEI4aTVWUTZHNzB4bHVWdCtleVpkbFZKV1Qvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0da029-c776-4e0b-b2d7-4324c54288aa", "record_id": "flaws_cloudtrail:0000010:1a0da029-c776-4e0b-b2d7-4324c54288aa", "row_index": 10, "timestamp": "2019-05-15T09:25:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0da029-c776-4e0b-b2d7-4324c54288aa", "eventTime": "2019-05-15T09:25:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJdWhzRnB0WGV0bndoSGhxWC9xWlk0bFNNTDRmYU1QaFBuZWNxclNoYWt6MzF3bzdRNFlobXpIUmJHVHRxUXZneFM3Y21sYnBYMExLVjNtOEg2RFBVYk5iRzdURHEyckJ4SWpTcmlNTFRFUFNlZTlVVE4va1l5WkJkc2M5L2dZVlRLZ1ovUGxhU1ZZNGNSb1I0aVZqY2J5REFxUkNXeU5KTVAyWVd5SGpTVGZNcGpkcXhlaEI4aTVWUTZHNzB4bHVWdCtleVpkbFZKV1Qvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e7fc43-3411-4bbb-adfc-117b9824da20", "record_id": "flaws_cloudtrail:0000011:24e7fc43-3411-4bbb-adfc-117b9824da20", "row_index": 11, "timestamp": "2019-05-15T09:25:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e7fc43-3411-4bbb-adfc-117b9824da20", "eventTime": "2019-05-15T09:25:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2UEl5ekI3TDE2dlhtQThmcmx3UnBUazFKc0xuSmJKRTJmd3Z1WVBnZUFIY3RUOEFpL0NZTVBlSnh3aTA4SVd5WVRudldwamh1d1RVd2RLNmxhZk1KcC91OWorTWtQV0V6a3JBdHVpaHYvTHMrdDJQeVgzMUc5eXpHL05oOTVnOFdKSGVxUkUrR2NzdHY0T1JFTE5ZNFpTb21mbVR6NG1kSithditaS04xVjhWMExhZHFNd2RVVnphNTdaNUFYa2RUcGZ4TUtYYTAybllSZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e7fc43-3411-4bbb-adfc-117b9824da20", "record_id": "flaws_cloudtrail:0000012:24e7fc43-3411-4bbb-adfc-117b9824da20", "row_index": 12, "timestamp": "2019-05-15T09:25:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e7fc43-3411-4bbb-adfc-117b9824da20", "eventTime": "2019-05-15T09:25:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2UEl5ekI3TDE2dlhtQThmcmx3UnBUazFKc0xuSmJKRTJmd3Z1WVBnZUFIY3RUOEFpL0NZTVBlSnh3aTA4SVd5WVRudldwamh1d1RVd2RLNmxhZk1KcC91OWorTWtQV0V6a3JBdHVpaHYvTHMrdDJQeVgzMUc5eXpHL05oOTVnOFdKSGVxUkUrR2NzdHY0T1JFTE5ZNFpTb21mbVR6NG1kSithditaS04xVjhWMExhZHFNd2RVVnphNTdaNUFYa2RUcGZ4TUtYYTAybllSZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c5788c-bb40-4e2b-a140-8f3adb9186c8", "record_id": "flaws_cloudtrail:0000013:46c5788c-bb40-4e2b-a140-8f3adb9186c8", "row_index": 13, "timestamp": "2019-05-15T09:25:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c5788c-bb40-4e2b-a140-8f3adb9186c8", "eventTime": "2019-05-15T09:25:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuNVVjTDduL1VPcVdYOXZWUE11RFk3QzgzQmNvWGNIVVZhZ2s5NkNQc2ZtTVRYSkEwTXUrNWorUkRTb0ZxaUhoMGg1NWc0SHp0S09CaHVQeVFUdVExMU1XVHYrbmxhOUY2ZDBKMFYxdU1jZmdDQyszZkhZOWt5Wm5oZjlNMWo0bGk2Y3ZOeVFDdnlmS2prckpnTDdTd3BTK2JnMlIvcSs2N0tGbUZDRHJzQVdyM0hHOFBhckZpQ0pIZzVSQXpNQTFmUmxjSWhYeHRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c5788c-bb40-4e2b-a140-8f3adb9186c8", "record_id": "flaws_cloudtrail:0000014:46c5788c-bb40-4e2b-a140-8f3adb9186c8", "row_index": 14, "timestamp": "2019-05-15T09:25:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c5788c-bb40-4e2b-a140-8f3adb9186c8", "eventTime": "2019-05-15T09:25:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuNVVjTDduL1VPcVdYOXZWUE11RFk3QzgzQmNvWGNIVVZhZ2s5NkNQc2ZtTVRYSkEwTXUrNWorUkRTb0ZxaUhoMGg1NWc0SHp0S09CaHVQeVFUdVExMU1XVHYrbmxhOUY2ZDBKMFYxdU1jZmdDQyszZkhZOWt5Wm5oZjlNMWo0bGk2Y3ZOeVFDdnlmS2prckpnTDdTd3BTK2JnMlIvcSs2N0tGbUZDRHJzQVdyM0hHOFBhckZpQ0pIZzVSQXpNQTFmUmxjSWhYeHRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab563cc8-1e43-4bd0-94c1-22c27a387a84", "record_id": "flaws_cloudtrail:0000015:ab563cc8-1e43-4bd0-94c1-22c27a387a84", "row_index": 15, "timestamp": "2019-05-15T09:25:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab563cc8-1e43-4bd0-94c1-22c27a387a84", "eventTime": "2019-05-15T09:25:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWT2JuLzJUbENJZEpyc0VpK1hoVWM1clRhN2s3M21xQ1dYVmg5VmREeEZZL1FCOU14QThMcklickNuaCthc3RXUUtKN2FualRhRjF3aEJTMTgwamxCOWxudEorQkREY2RnZFlSWC9DeTZ4bHFIR3VzZU9KZ0s1a0w0cm9UcU1pdmFwSkZReUZBTGt6Wmdva0NJK3BiYVZpUmQ3RTRsdmRHUnZIcjlqK1N0UXJxN1RsVTRkUGpnbURZajdLbnJHSitXYkE4aWdsdkpGOEtqdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab563cc8-1e43-4bd0-94c1-22c27a387a84", "record_id": "flaws_cloudtrail:0000016:ab563cc8-1e43-4bd0-94c1-22c27a387a84", "row_index": 16, "timestamp": "2019-05-15T09:25:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab563cc8-1e43-4bd0-94c1-22c27a387a84", "eventTime": "2019-05-15T09:25:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWT2JuLzJUbENJZEpyc0VpK1hoVWM1clRhN2s3M21xQ1dYVmg5VmREeEZZL1FCOU14QThMcklickNuaCthc3RXUUtKN2FualRhRjF3aEJTMTgwamxCOWxudEorQkREY2RnZFlSWC9DeTZ4bHFIR3VzZU9KZ0s1a0w0cm9UcU1pdmFwSkZReUZBTGt6Wmdva0NJK3BiYVZpUmQ3RTRsdmRHUnZIcjlqK1N0UXJxN1RsVTRkUGpnbURZajdLbnJHSitXYkE4aWdsdkpGOEtqdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71bd4eb-80d3-4ccb-81b6-bfd239831c08f", "record_id": "flaws_cloudtrail:0000017:f71bd4eb-80d3-4ccb-81b6-bfd239831c08f", "row_index": 17, "timestamp": "2019-05-15T09:25:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71bd4eb-80d3-4ccb-81b6-bfd239831c08f", "eventTime": "2019-05-15T09:25:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDUnkyT01zS2I5Mmdwak1PSHJGVmQ2ZmEvMnlQUm52bk9aN0Z6aGF6a1BaOVp5RWNtc0NZNWRrTng2a01DUmcwc1IzMnBvU3gwT3ZaajZ6dTRTU2JibzNub2xWMnRDbnN4WXF2eHc2RlIwRTRuQlFiNDM4SEJVR2YyejU0TzE0YVZvREpBRGxEb1RpRGFzeHY5cyt5NjBKWmhDZU5Jb0JGZm8zVDd2TVo5N2FHR3pHdDNJdDBZdkpLVnJZMHJCYmZOM1FDc0t1TFFnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71bd4eb-80d3-4ccb-81b6-bfd239831c08f", "record_id": "flaws_cloudtrail:0000018:f71bd4eb-80d3-4ccb-81b6-bfd239831c08f", "row_index": 18, "timestamp": "2019-05-15T09:25:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71bd4eb-80d3-4ccb-81b6-bfd239831c08f", "eventTime": "2019-05-15T09:25:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDUnkyT01zS2I5Mmdwak1PSHJGVmQ2ZmEvMnlQUm52bk9aN0Z6aGF6a1BaOVp5RWNtc0NZNWRrTng2a01DUmcwc1IzMnBvU3gwT3ZaajZ6dTRTU2JibzNub2xWMnRDbnN4WXF2eHc2RlIwRTRuQlFiNDM4SEJVR2YyejU0TzE0YVZvREpBRGxEb1RpRGFzeHY5cyt5NjBKWmhDZU5Jb0JGZm8zVDd2TVo5N2FHR3pHdDNJdDBZdkpLVnJZMHJCYmZOM1FDc0t1TFFnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c59d8d-7969-4d17-a5c2-dc6778a491835", "record_id": "flaws_cloudtrail:0000019:c1c59d8d-7969-4d17-a5c2-dc6778a491835", "row_index": 19, "timestamp": "2019-05-15T09:25:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c59d8d-7969-4d17-a5c2-dc6778a491835", "eventTime": "2019-05-15T09:25:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJubnpUUXlCRTVaa0pGV3R4cnA5VmNiNm15S3FjSFhpVXdlUytnbmovNFE1WHFsc2ovSllPOUVoa2FoNHFldXRWc2oydis4NkxZTUxwVTJwWWZPdjJmd290dGI1RjYvUjc2VnFMQnk4bWFETW9NSFozd3g4cEs4dmxZa1BsTy9NSlExWWZ3TmZndXVVREJGeXM1ZEpFUGo3NzVnalJYdGViUENrU2tzL1dhOU91cnVGUE9GbGFabnJoWG53aDAxMlZCV050d0hUK2c0MD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c59d8d-7969-4d17-a5c2-dc6778a491835", "record_id": "flaws_cloudtrail:0000020:c1c59d8d-7969-4d17-a5c2-dc6778a491835", "row_index": 20, "timestamp": "2019-05-15T09:25:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c59d8d-7969-4d17-a5c2-dc6778a491835", "eventTime": "2019-05-15T09:25:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJubnpUUXlCRTVaa0pGV3R4cnA5VmNiNm15S3FjSFhpVXdlUytnbmovNFE1WHFsc2ovSllPOUVoa2FoNHFldXRWc2oydis4NkxZTUxwVTJwWWZPdjJmd290dGI1RjYvUjc2VnFMQnk4bWFETW9NSFozd3g4cEs4dmxZa1BsTy9NSlExWWZ3TmZndXVVREJGeXM1ZEpFUGo3NzVnalJYdGViUENrU2tzL1dhOU91cnVGUE9GbGFabnJoWG53aDAxMlZCV050d0hUK2c0MD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e716c37-3f29-4439-93da-f9a988665484", "record_id": "flaws_cloudtrail:0000021:7e716c37-3f29-4439-93da-f9a988665484", "row_index": 21, "timestamp": "2019-05-15T09:25:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e716c37-3f29-4439-93da-f9a988665484", "eventTime": "2019-05-15T09:25:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyM0d6ck1VM1N6NzlRZjlCLzh4YkNXK2NFVWtFUUZhQmZkV05FZG5xTjR4d1lZdHh0c0Y2OFNUb0owU2hmWlFaaGc0c2RQMEY4d05KYmMxNFM2U2Rmd0lHUzdkWmJSSjk3dDE2dUFOVytsZTU2b2gwUTB5ek1Yd21UQ2RQeW9BUzU1ZnZJeEhjVEc4N2l3Q1RyditqR0F5ZHJ0RkVTTFdtQlpwM3RraWFDZ21MV2tnRVpndU9XbU5reWpjOStrT0t4cGZFTENWTjlXaUgzR2NRUHBNd05UZjZBOHdBY08wPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e716c37-3f29-4439-93da-f9a988665484", "record_id": "flaws_cloudtrail:0000022:7e716c37-3f29-4439-93da-f9a988665484", "row_index": 22, "timestamp": "2019-05-15T09:25:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e716c37-3f29-4439-93da-f9a988665484", "eventTime": "2019-05-15T09:25:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyM0d6ck1VM1N6NzlRZjlCLzh4YkNXK2NFVWtFUUZhQmZkV05FZG5xTjR4d1lZdHh0c0Y2OFNUb0owU2hmWlFaaGc0c2RQMEY4d05KYmMxNFM2U2Rmd0lHUzdkWmJSSjk3dDE2dUFOVytsZTU2b2gwUTB5ek1Yd21UQ2RQeW9BUzU1ZnZJeEhjVEc4N2l3Q1RyditqR0F5ZHJ0RkVTTFdtQlpwM3RraWFDZ21MV2tnRVpndU9XbU5reWpjOStrT0t4cGZFTENWTjlXaUgzR2NRUHBNd05UZjZBOHdBY08wPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c165e1c-b1a9-4fe4-8510-7821b261dbdf", "record_id": "flaws_cloudtrail:0000023:1c165e1c-b1a9-4fe4-8510-7821b261dbdf", "row_index": 23, "timestamp": "2019-05-15T09:25:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c165e1c-b1a9-4fe4-8510-7821b261dbdf", "eventTime": "2019-05-15T09:25:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0VFcwbmI5UWtUbHpqdzNqKzB2dWkxaENQN2tCbG1yQXVlOXFYaWhxcGw3V0ZmM0ZXdENSY2xNN0NseVVOVE1LSDlMbTdjRm5ZTXBZQVFwd1lLdWZBTW5pVEJhRzFaN1UvOWxVcitjRW1hVGJHenpRVVlOWms5R25RMGJRakpWTjFGSjVjb3pMUnFpRUFYbSt5M2lKM3p3ekZzaDh2OTBwK05BUldhRTFGZy9qVVZWRGRBWW1LZ0tDTWcwOHNFQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c165e1c-b1a9-4fe4-8510-7821b261dbdf", "record_id": "flaws_cloudtrail:0000024:1c165e1c-b1a9-4fe4-8510-7821b261dbdf", "row_index": 24, "timestamp": "2019-05-15T09:25:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c165e1c-b1a9-4fe4-8510-7821b261dbdf", "eventTime": "2019-05-15T09:25:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0VFcwbmI5UWtUbHpqdzNqKzB2dWkxaENQN2tCbG1yQXVlOXFYaWhxcGw3V0ZmM0ZXdENSY2xNN0NseVVOVE1LSDlMbTdjRm5ZTXBZQVFwd1lLdWZBTW5pVEJhRzFaN1UvOWxVcitjRW1hVGJHenpRVVlOWms5R25RMGJRakpWTjFGSjVjb3pMUnFpRUFYbSt5M2lKM3p3ekZzaDh2OTBwK05BUldhRTFGZy9qVVZWRGRBWW1LZ0tDTWcwOHNFQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e0f97c5-8131-4e0b-95dc-b8745e4c5fdf", "record_id": "flaws_cloudtrail:0000025:1e0f97c5-8131-4e0b-95dc-b8745e4c5fdf", "row_index": 25, "timestamp": "2019-05-15T09:25:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e0f97c5-8131-4e0b-95dc-b8745e4c5fdf", "eventTime": "2019-05-15T09:25:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1WFZadmtRQm1XSWN3aCthZUk3aU0vTTFJRzR6SVV2OHZqczZ0U3dXcXJDQzZQOFFGbTQyWnU5d1lLc1FHVVdNUGRzaFJFK2UwdnQrYitsUGRTeDdSc1BLSys1NnlUcitmek5HenQxZTlWQU5BNzJxaEhMTUdPVm1MbTI0aEJud240SUpYTy8xZHRmUFJhU3NHT0tVbDJGeE5acTlQRTRNYitpRHRLNkxYU3pqY1dBSGlRRG9jblptWERXUENoY0lKQ0puK09sdktQdlNESXNUV01obG9IVkZtQWc3TVJvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e0f97c5-8131-4e0b-95dc-b8745e4c5fdf", "record_id": "flaws_cloudtrail:0000026:1e0f97c5-8131-4e0b-95dc-b8745e4c5fdf", "row_index": 26, "timestamp": "2019-05-15T09:25:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e0f97c5-8131-4e0b-95dc-b8745e4c5fdf", "eventTime": "2019-05-15T09:25:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1WFZadmtRQm1XSWN3aCthZUk3aU0vTTFJRzR6SVV2OHZqczZ0U3dXcXJDQzZQOFFGbTQyWnU5d1lLc1FHVVdNUGRzaFJFK2UwdnQrYitsUGRTeDdSc1BLSys1NnlUcitmek5HenQxZTlWQU5BNzJxaEhMTUdPVm1MbTI0aEJud240SUpYTy8xZHRmUFJhU3NHT0tVbDJGeE5acTlQRTRNYitpRHRLNkxYU3pqY1dBSGlRRG9jblptWERXUENoY0lKQ0puK09sdktQdlNESXNUV01obG9IVkZtQWc3TVJvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8be956b-24c6-4826-81ad-b02821a3497a", "record_id": "flaws_cloudtrail:0000027:a8be956b-24c6-4826-81ad-b02821a3497a", "row_index": 27, "timestamp": "2019-05-15T09:25:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8be956b-24c6-4826-81ad-b02821a3497a", "eventTime": "2019-05-15T09:25:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzTGxFbko5cVVxVkZ0YS9LcXg1MElZb2lsVSt4UHBHbmI3LzJ1Y2xwcE1WeWVoRHpaOC9UUHRIandOa2k3V2RHMzhjRGxtWjhHYkJSSkVIeW5RaGE2dWVrNnRKK1RCdzlnSThqL3R2U3BDQnE1NEozQXdCTEdaVXB4VktUemtuMXNxQ3lXcm1oUk1DRzljTmRFK3FGbE1FQTF4ZHp4N2xYQlhsWlRMempnejk5ZUFvL292OTlqZDJCUFpLWi9MU0Y4T3FKTENJa3l5SUxSQzZPcE1rdkdpTTJqNEQ4aHhvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8be956b-24c6-4826-81ad-b02821a3497a", "record_id": "flaws_cloudtrail:0000028:a8be956b-24c6-4826-81ad-b02821a3497a", "row_index": 28, "timestamp": "2019-05-15T09:25:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8be956b-24c6-4826-81ad-b02821a3497a", "eventTime": "2019-05-15T09:25:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzTGxFbko5cVVxVkZ0YS9LcXg1MElZb2lsVSt4UHBHbmI3LzJ1Y2xwcE1WeWVoRHpaOC9UUHRIandOa2k3V2RHMzhjRGxtWjhHYkJSSkVIeW5RaGE2dWVrNnRKK1RCdzlnSThqL3R2U3BDQnE1NEozQXdCTEdaVXB4VktUemtuMXNxQ3lXcm1oUk1DRzljTmRFK3FGbE1FQTF4ZHp4N2xYQlhsWlRMempnejk5ZUFvL292OTlqZDJCUFpLWi9MU0Y4T3FKTENJa3l5SUxSQzZPcE1rdkdpTTJqNEQ4aHhvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22333b82-03e3-447f-9635-e08e153057d94", "record_id": "flaws_cloudtrail:0000029:22333b82-03e3-447f-9635-e08e153057d94", "row_index": 29, "timestamp": "2019-05-15T09:25:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22333b82-03e3-447f-9635-e08e153057d94", "eventTime": "2019-05-15T09:25:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzc2NLMnNwVE5tbllGRDEzMnRQRXpYMVYzRWI2ZjI3YW53c0NSci9ObkZyQlVDTFM4VWRmS00zTy91QnNhaUdqWHdycDd1bVNMdTRSaDRwNWVlaTN3Vm45dzYzcTFLOHEzMFJ2cFE1NnIwd1ZOLy9icGJYZjVRbGlFc1lpS0ZHVmhUczZtZDZ1alFKZlNpcFhFSmVRU1NSVmRhOHF1bnMvd1ZOMlloOUp0TWh3eS90SjV2WDJRQ0NtdW1GeEM4TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22333b82-03e3-447f-9635-e08e153057d94", "record_id": "flaws_cloudtrail:0000030:22333b82-03e3-447f-9635-e08e153057d94", "row_index": 30, "timestamp": "2019-05-15T09:25:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22333b82-03e3-447f-9635-e08e153057d94", "eventTime": "2019-05-15T09:25:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzc2NLMnNwVE5tbllGRDEzMnRQRXpYMVYzRWI2ZjI3YW53c0NSci9ObkZyQlVDTFM4VWRmS00zTy91QnNhaUdqWHdycDd1bVNMdTRSaDRwNWVlaTN3Vm45dzYzcTFLOHEzMFJ2cFE1NnIwd1ZOLy9icGJYZjVRbGlFc1lpS0ZHVmhUczZtZDZ1alFKZlNpcFhFSmVRU1NSVmRhOHF1bnMvd1ZOMlloOUp0TWh3eS90SjV2WDJRQ0NtdW1GeEM4TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c056077d6-c471-4a9d-8639-60dfc1cda4c0", "record_id": "flaws_cloudtrail:0000031:c056077d6-c471-4a9d-8639-60dfc1cda4c0", "row_index": 31, "timestamp": "2019-05-15T09:25:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c056077d6-c471-4a9d-8639-60dfc1cda4c0", "eventTime": "2019-05-15T09:25:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRGVNakVPV2FhWjBLUm1ZbXN2RTA2b1FnRVIvdDZNYjJIK0srdW4rMXhWVDVwanNXL0djZFc1NXR0dFpGK1dsam9Cekw0dnBDM0FTYnlKY2F1NEFJK2lLMElrbzNkUUhmRkZQd3ZqK0FBWnpyMFBRZzUvYndmTytlUnRFbXA1V2tJTzVsYkowRUxaVmJyZVA0WkRXalJtdXowMTc3bFhmOXRseE5aRitqSUI3blluOFVrTk5HVHl2MzVLVm5sd2pOK1MxNlZEUFJKak1MNTlydHUyaFRYbTFjaXZ4TDdrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c056077d6-c471-4a9d-8639-60dfc1cda4c0", "record_id": "flaws_cloudtrail:0000032:c056077d6-c471-4a9d-8639-60dfc1cda4c0", "row_index": 32, "timestamp": "2019-05-15T09:25:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c056077d6-c471-4a9d-8639-60dfc1cda4c0", "eventTime": "2019-05-15T09:25:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRGVNakVPV2FhWjBLUm1ZbXN2RTA2b1FnRVIvdDZNYjJIK0srdW4rMXhWVDVwanNXL0djZFc1NXR0dFpGK1dsam9Cekw0dnBDM0FTYnlKY2F1NEFJK2lLMElrbzNkUUhmRkZQd3ZqK0FBWnpyMFBRZzUvYndmTytlUnRFbXA1V2tJTzVsYkowRUxaVmJyZVA0WkRXalJtdXowMTc3bFhmOXRseE5aRitqSUI3blluOFVrTk5HVHl2MzVLVm5sd2pOK1MxNlZEUFJKak1MNTlydHUyaFRYbTFjaXZ4TDdrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01a43dc7-60af-408d-af88-c8ea741675", "record_id": "flaws_cloudtrail:0000033:01a43dc7-60af-408d-af88-c8ea741675", "row_index": 33, "timestamp": "2019-05-15T09:25:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01a43dc7-60af-408d-af88-c8ea741675", "eventTime": "2019-05-15T09:25:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhV2hxOVFqbzZqbUZQRm82OVJka2hYcC9FWUtXdEpjeW9YTm1iM09aMk1BZjNLV0txSDVFNmNkc2RXZDVzNlhidWEzbE5FVXNkTWxhK1lBTFZLU2F6blh1Wjczd0o4K21XRUJ1MTNmdm9QakY5NGpQbjdRODZPRmt2QkVLQVNDSnFPcy9rTG5MOE5odndBbUVSR3EyTmlaVG1XOFc1T2d3d0pDRlk1Z3lSdjVQT3pwczloLyt2c2QvQ3RndGxoVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01a43dc7-60af-408d-af88-c8ea741675", "record_id": "flaws_cloudtrail:0000034:01a43dc7-60af-408d-af88-c8ea741675", "row_index": 34, "timestamp": "2019-05-15T09:25:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01a43dc7-60af-408d-af88-c8ea741675", "eventTime": "2019-05-15T09:25:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhV2hxOVFqbzZqbUZQRm82OVJka2hYcC9FWUtXdEpjeW9YTm1iM09aMk1BZjNLV0txSDVFNmNkc2RXZDVzNlhidWEzbE5FVXNkTWxhK1lBTFZLU2F6blh1Wjczd0o4K21XRUJ1MTNmdm9QakY5NGpQbjdRODZPRmt2QkVLQVNDSnFPcy9rTG5MOE5odndBbUVSR3EyTmlaVG1XOFc1T2d3d0pDRlk1Z3lSdjVQT3pwczloLyt2c2QvQ3RndGxoVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28a0bdad-d5d7-408e-9018-72442a2096c9", "record_id": "flaws_cloudtrail:0000035:28a0bdad-d5d7-408e-9018-72442a2096c9", "row_index": 35, "timestamp": "2019-05-15T09:25:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28a0bdad-d5d7-408e-9018-72442a2096c9", "eventTime": "2019-05-15T09:25:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwOExuY2I4VHlVdUxkNys5TlEzMTZDWHNsQ21yTFQrQ2diV09EWGw1MzVYMi9YVms5RUlTeFpaUkMrVzZGb3pZaVBmeGpZR1hrZDFWZm5FYWZxaFB4WWx3QXp5ck1RUnZsT3BvQTdRM3pxdWJ2UU8wTUJwMU5hUFVYbTVicWNyTk5QNUJJWXpGbU9zSFBCTzF2OW9MMUViMmNmNTVkMFhseFVvajFOV0F5QmtzOHRxdmt2a0pONnNEbDRrelB4c0hnUHg4U3JLK3d2Ri9ISERKaXVjYVo2UzRZWTlTZnNZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28a0bdad-d5d7-408e-9018-72442a2096c9", "record_id": "flaws_cloudtrail:0000036:28a0bdad-d5d7-408e-9018-72442a2096c9", "row_index": 36, "timestamp": "2019-05-15T09:25:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28a0bdad-d5d7-408e-9018-72442a2096c9", "eventTime": "2019-05-15T09:25:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwOExuY2I4VHlVdUxkNys5TlEzMTZDWHNsQ21yTFQrQ2diV09EWGw1MzVYMi9YVms5RUlTeFpaUkMrVzZGb3pZaVBmeGpZR1hrZDFWZm5FYWZxaFB4WWx3QXp5ck1RUnZsT3BvQTdRM3pxdWJ2UU8wTUJwMU5hUFVYbTVicWNyTk5QNUJJWXpGbU9zSFBCTzF2OW9MMUViMmNmNTVkMFhseFVvajFOV0F5QmtzOHRxdmt2a0pONnNEbDRrelB4c0hnUHg4U3JLK3d2Ri9ISERKaXVjYVo2UzRZWTlTZnNZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff31d041-437b-48eb-b92e-26ee320c2adb", "record_id": "flaws_cloudtrail:0000037:ff31d041-437b-48eb-b92e-26ee320c2adb", "row_index": 37, "timestamp": "2019-05-15T09:25:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff31d041-437b-48eb-b92e-26ee320c2adb", "eventTime": "2019-05-15T09:25:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFQTFhb0M3VzUyS0R0V01KVHZTanB3QmF6cnZvRmFDM1ZJd2loN2F1anV5aTlLSjdCa0JCb04zOXNPK2RtQ1QxMCtGeCszU2xveDRXVmplcjhXdDN5UDRlQWlHakxBaENHaDU3cUpUSCt4Zi80cGpqa1Y1djIzYVZDaU5CY2Vmc2hrY2R4N0VhVTNFK01LRVpZZStGWTZ4WVhhdWFqWDhPM3Iwb01PRDJUK25pNzNSWHZDK3ZOZWhXc1daY0h2cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff31d041-437b-48eb-b92e-26ee320c2adb", "record_id": "flaws_cloudtrail:0000038:ff31d041-437b-48eb-b92e-26ee320c2adb", "row_index": 38, "timestamp": "2019-05-15T09:25:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff31d041-437b-48eb-b92e-26ee320c2adb", "eventTime": "2019-05-15T09:25:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFQTFhb0M3VzUyS0R0V01KVHZTanB3QmF6cnZvRmFDM1ZJd2loN2F1anV5aTlLSjdCa0JCb04zOXNPK2RtQ1QxMCtGeCszU2xveDRXVmplcjhXdDN5UDRlQWlHakxBaENHaDU3cUpUSCt4Zi80cGpqa1Y1djIzYVZDaU5CY2Vmc2hrY2R4N0VhVTNFK01LRVpZZStGWTZ4WVhhdWFqWDhPM3Iwb01PRDJUK25pNzNSWHZDK3ZOZWhXc1daY0h2cz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed690126-d304-43e8-b2cc-455e00d22fc1", "record_id": "flaws_cloudtrail:0000039:ed690126-d304-43e8-b2cc-455e00d22fc1", "row_index": 39, "timestamp": "2019-05-15T09:27:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed690126-d304-43e8-b2cc-455e00d22fc1", "eventTime": "2019-05-15T09:27:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed690126-d304-43e8-b2cc-455e00d22fc1", "record_id": "flaws_cloudtrail:0000040:ed690126-d304-43e8-b2cc-455e00d22fc1", "row_index": 40, "timestamp": "2019-05-15T09:27:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "78.255.48.231", "user_agent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed690126-d304-43e8-b2cc-455e00d22fc1", "eventTime": "2019-05-15T09:27:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "78.255.48.231", "userAgent": "aws-cli/1.16.157 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.147", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827cccef-98fb-4ba8-97d3-b415ce870991", "record_id": "flaws_cloudtrail:0000041:827cccef-98fb-4ba8-97d3-b415ce870991", "row_index": 41, "timestamp": "2019-05-15T09:36:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827cccef-98fb-4ba8-97d3-b415ce870991", "eventTime": "2019-05-15T09:36:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827cccef-98fb-4ba8-97d3-b415ce870991", "record_id": "flaws_cloudtrail:0000042:827cccef-98fb-4ba8-97d3-b415ce870991", "row_index": 42, "timestamp": "2019-05-15T09:36:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827cccef-98fb-4ba8-97d3-b415ce870991", "eventTime": "2019-05-15T09:36:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a4b1b3-045c-49cc-84cf-75c904776196", "record_id": "flaws_cloudtrail:0000043:63a4b1b3-045c-49cc-84cf-75c904776196", "row_index": 43, "timestamp": "2019-05-15T09:40:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a4b1b3-045c-49cc-84cf-75c904776196", "eventTime": "2019-05-15T09:40:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a4b1b3-045c-49cc-84cf-75c904776196", "record_id": "flaws_cloudtrail:0000044:63a4b1b3-045c-49cc-84cf-75c904776196", "row_index": 44, "timestamp": "2019-05-15T09:40:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a4b1b3-045c-49cc-84cf-75c904776196", "eventTime": "2019-05-15T09:40:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88506a-b6bd-4515-b63d-426b48384556", "record_id": "flaws_cloudtrail:0000045:88506a-b6bd-4515-b63d-426b48384556", "row_index": 45, "timestamp": "2019-05-15T09:49:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88506a-b6bd-4515-b63d-426b48384556", "eventTime": "2019-05-15T09:49:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88506a-b6bd-4515-b63d-426b48384556", "record_id": "flaws_cloudtrail:0000046:88506a-b6bd-4515-b63d-426b48384556", "row_index": 46, "timestamp": "2019-05-15T09:49:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88506a-b6bd-4515-b63d-426b48384556", "eventTime": "2019-05-15T09:49:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158cb104-bb1c-42fe-917a-b295c85168a1", "record_id": "flaws_cloudtrail:0000047:158cb104-bb1c-42fe-917a-b295c85168a1", "row_index": 47, "timestamp": "2019-05-15T09:49:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158cb104-bb1c-42fe-917a-b295c85168a1", "eventTime": "2019-05-15T09:49:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158cb104-bb1c-42fe-917a-b295c85168a1", "record_id": "flaws_cloudtrail:0000048:158cb104-bb1c-42fe-917a-b295c85168a1", "row_index": 48, "timestamp": "2019-05-15T09:49:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158cb104-bb1c-42fe-917a-b295c85168a1", "eventTime": "2019-05-15T09:49:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09df5988-c2f4-4b76-a082-fd7b393bab37", "record_id": "flaws_cloudtrail:0000049:09df5988-c2f4-4b76-a082-fd7b393bab37", "row_index": 49, "timestamp": "2019-05-15T09:53:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09df5988-c2f4-4b76-a082-fd7b393bab37", "eventTime": "2019-05-15T09:53:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09df5988-c2f4-4b76-a082-fd7b393bab37", "record_id": "flaws_cloudtrail:0000050:09df5988-c2f4-4b76-a082-fd7b393bab37", "row_index": 50, "timestamp": "2019-05-15T09:53:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09df5988-c2f4-4b76-a082-fd7b393bab37", "eventTime": "2019-05-15T09:53:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc30ace-fdc2-45bb-936e-e81411bdaf46", "record_id": "flaws_cloudtrail:0000051:1cc30ace-fdc2-45bb-936e-e81411bdaf46", "row_index": 51, "timestamp": "2019-05-15T09:53:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc30ace-fdc2-45bb-936e-e81411bdaf46", "eventTime": "2019-05-15T09:53:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc30ace-fdc2-45bb-936e-e81411bdaf46", "record_id": "flaws_cloudtrail:0000052:1cc30ace-fdc2-45bb-936e-e81411bdaf46", "row_index": 52, "timestamp": "2019-05-15T09:53:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc30ace-fdc2-45bb-936e-e81411bdaf46", "eventTime": "2019-05-15T09:53:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e426c088-89a4-4b5a-b6d4-687a2f78414", "record_id": "flaws_cloudtrail:0000053:e426c088-89a4-4b5a-b6d4-687a2f78414", "row_index": 53, "timestamp": "2019-05-15T09:55:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e426c088-89a4-4b5a-b6d4-687a2f78414", "eventTime": "2019-05-15T09:55:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e426c088-89a4-4b5a-b6d4-687a2f78414", "record_id": "flaws_cloudtrail:0000054:e426c088-89a4-4b5a-b6d4-687a2f78414", "row_index": 54, "timestamp": "2019-05-15T09:55:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e426c088-89a4-4b5a-b6d4-687a2f78414", "eventTime": "2019-05-15T09:55:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "075dce30-5b1b-4915-949e-d4e3457ef20f", "record_id": "flaws_cloudtrail:0000055:075dce30-5b1b-4915-949e-d4e3457ef20f", "row_index": 55, "timestamp": "2019-05-15T09:56:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "075dce30-5b1b-4915-949e-d4e3457ef20f", "eventTime": "2019-05-15T09:56:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "075dce30-5b1b-4915-949e-d4e3457ef20f", "record_id": "flaws_cloudtrail:0000056:075dce30-5b1b-4915-949e-d4e3457ef20f", "row_index": 56, "timestamp": "2019-05-15T09:56:29Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "075dce30-5b1b-4915-949e-d4e3457ef20f", "eventTime": "2019-05-15T09:56:29Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288281df3-81b4-408a-9608-7f51e7f2685c", "record_id": "flaws_cloudtrail:0000057:288281df3-81b4-408a-9608-7f51e7f2685c", "row_index": 57, "timestamp": "2019-05-15T09:57:50Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288281df3-81b4-408a-9608-7f51e7f2685c", "eventTime": "2019-05-15T09:57:50Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288281df3-81b4-408a-9608-7f51e7f2685c", "record_id": "flaws_cloudtrail:0000058:288281df3-81b4-408a-9608-7f51e7f2685c", "row_index": 58, "timestamp": "2019-05-15T09:57:50Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288281df3-81b4-408a-9608-7f51e7f2685c", "eventTime": "2019-05-15T09:57:50Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5a6456-cd7e-4aeb-be10-0e49d7d7315f", "record_id": "flaws_cloudtrail:0000059:4e5a6456-cd7e-4aeb-be10-0e49d7d7315f", "row_index": 59, "timestamp": "2019-05-15T09:58:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5a6456-cd7e-4aeb-be10-0e49d7d7315f", "eventTime": "2019-05-15T09:58:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e5a6456-cd7e-4aeb-be10-0e49d7d7315f", "record_id": "flaws_cloudtrail:0000060:4e5a6456-cd7e-4aeb-be10-0e49d7d7315f", "row_index": 60, "timestamp": "2019-05-15T09:58:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e5a6456-cd7e-4aeb-be10-0e49d7d7315f", "eventTime": "2019-05-15T09:58:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b78118-c4c9-4c68-b3ff-afa899bc9f18", "record_id": "flaws_cloudtrail:0000061:5b78118-c4c9-4c68-b3ff-afa899bc9f18", "row_index": 61, "timestamp": "2019-05-15T09:58:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b78118-c4c9-4c68-b3ff-afa899bc9f18", "eventTime": "2019-05-15T09:58:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b78118-c4c9-4c68-b3ff-afa899bc9f18", "record_id": "flaws_cloudtrail:0000062:5b78118-c4c9-4c68-b3ff-afa899bc9f18", "row_index": 62, "timestamp": "2019-05-15T09:58:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b78118-c4c9-4c68-b3ff-afa899bc9f18", "eventTime": "2019-05-15T09:58:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ae053521-0388-48af-b495-81f70b77da59", "record_id": "flaws_cloudtrail:0000063:7ae053521-0388-48af-b495-81f70b77da59", "row_index": 63, "timestamp": "2019-05-15T09:58:59Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ae053521-0388-48af-b495-81f70b77da59", "eventTime": "2019-05-15T09:58:59Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ae053521-0388-48af-b495-81f70b77da59", "record_id": "flaws_cloudtrail:0000064:7ae053521-0388-48af-b495-81f70b77da59", "row_index": 64, "timestamp": "2019-05-15T09:58:59Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ae053521-0388-48af-b495-81f70b77da59", "eventTime": "2019-05-15T09:58:59Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b482c99-a7c5-42ce-8a4f-a5d79392d9b3", "record_id": "flaws_cloudtrail:0000065:3b482c99-a7c5-42ce-8a4f-a5d79392d9b3", "row_index": 65, "timestamp": "2019-05-15T10:00:30Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b482c99-a7c5-42ce-8a4f-a5d79392d9b3", "eventTime": "2019-05-15T10:00:30Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b482c99-a7c5-42ce-8a4f-a5d79392d9b3", "record_id": "flaws_cloudtrail:0000066:3b482c99-a7c5-42ce-8a4f-a5d79392d9b3", "row_index": 66, "timestamp": "2019-05-15T10:00:30Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b482c99-a7c5-42ce-8a4f-a5d79392d9b3", "eventTime": "2019-05-15T10:00:30Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382b17c1-6c49-4ee7-b733-14bda7d4ff9d", "record_id": "flaws_cloudtrail:0000067:382b17c1-6c49-4ee7-b733-14bda7d4ff9d", "row_index": 67, "timestamp": "2019-05-15T10:00:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382b17c1-6c49-4ee7-b733-14bda7d4ff9d", "eventTime": "2019-05-15T10:00:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382b17c1-6c49-4ee7-b733-14bda7d4ff9d", "record_id": "flaws_cloudtrail:0000068:382b17c1-6c49-4ee7-b733-14bda7d4ff9d", "row_index": 68, "timestamp": "2019-05-15T10:00:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382b17c1-6c49-4ee7-b733-14bda7d4ff9d", "eventTime": "2019-05-15T10:00:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a14794-96fc-43c1-a3f1-4ac334d64de2", "record_id": "flaws_cloudtrail:0000069:a14794-96fc-43c1-a3f1-4ac334d64de2", "row_index": 69, "timestamp": "2019-05-15T10:01:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a14794-96fc-43c1-a3f1-4ac334d64de2", "eventTime": "2019-05-15T10:01:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "expiration": "May 15, 2019 4:03:54 PM", "sessionToken": "AgoJb3JpZ2luX2VjEPL//////////wEaCXVzLXdlc3QtMiJHMEUCIQD9PxOSzjJ/OqH2dTL23wYEvPZE4UOEoxRzdDQXVO+YAQIgBe+ZBgD2TYFqsmSmUg/WBdZh/r2Puti78eG6KZFRA2oq4wMI6///////////ARAAGgw5NzU0MjYyNjIwMjkiDERKZwbFPEd7r6bSFCq3A1r+BKEwzoTyea6Ny8Jat36BV/gM9L6rzNEY1mhGol7UiC8DXF8o3dKa+HUvXM+OmQ9392wARlTcnl+l5HzquRNItQISJyUG48aAEcT3swzW1l2vFy9tOIxovpXN8CKwnLhzUabnvt0j+ogPsUylKUNFevF2SB3w0SXrS0iePd9EfBJ0VbXKHOo+zTITijuci1+c8q7D3AVMob2D0NDNqJ14foPJ0wmy6M2KywomxxFYfsqr9BXryHW1GVIzLNTR9j6nOr6cWskfoTFWUtuUIZMPwrjQBedKhTPteZ+tb5XyYaSkrymn1hjEG+AJhK684bPOJ0YtEY2RIyGI5ihUSRfi4XhIuI/wketSDqMvx9j2D5FtxPSQWumCpOiffa21XGB74yu6NNyXE4AZu1BZp8Nqv8yW0Y9Sv2E6Qmw5R5Dm36jA+vvDsvByWOzWniM01zEcSTRlwcIFpiEk6yGgR0CHDGrLF5ieYmt3rV4V75n2a0t7EFMDR9THxkRJASb7p8etpAFSK3lGirUvAjtbptwuwwRNk8uLeTvcO11GhZfy2dVBshTRupdu2bL5qeipqa5+0hFfYoEwgsfv5gU6tAHsy5xgcBPXrzU0kfRmc5iLJCDiIMzP6MOiUJt0gNYlnAz8jR3/BdWVupaJ6eE6ste/rsZ+UA+8lp0MMMt3DDn0X6RFtKxychb4unKtcreCTXN0Iy6CAGibFDqQOjjGtbg/vjRKERvHhEinpNTuHfmvWlq4MSATIGz3aCJbHFTfCbuOmrOlj3X7tR6VRy8Uf/MXJb9ep9vYYo/rA33v2Qg++rMzXu8l4HFyaDNi+znyM+NuBhs="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a14794-96fc-43c1-a3f1-4ac334d64de2", "record_id": "flaws_cloudtrail:0000070:a14794-96fc-43c1-a3f1-4ac334d64de2", "row_index": 70, "timestamp": "2019-05-15T10:01:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a14794-96fc-43c1-a3f1-4ac334d64de2", "eventTime": "2019-05-15T10:01:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "expiration": "May 15, 2019 4:03:54 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcf8aa1e-1fe7-4973-b8ca-6e803e8eb044", "record_id": "flaws_cloudtrail:0000071:fcf8aa1e-1fe7-4973-b8ca-6e803e8eb044", "row_index": 71, "timestamp": "2019-05-15T10:04:44Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcf8aa1e-1fe7-4973-b8ca-6e803e8eb044", "eventTime": "2019-05-15T10:04:44Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcf8aa1e-1fe7-4973-b8ca-6e803e8eb044", "record_id": "flaws_cloudtrail:0000072:fcf8aa1e-1fe7-4973-b8ca-6e803e8eb044", "row_index": 72, "timestamp": "2019-05-15T10:04:44Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcf8aa1e-1fe7-4973-b8ca-6e803e8eb044", "eventTime": "2019-05-15T10:04:44Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be8e6ce2-a920-4752-bfd0-71815c5e0", "record_id": "flaws_cloudtrail:0000073:be8e6ce2-a920-4752-bfd0-71815c5e0", "row_index": 73, "timestamp": "2019-05-15T10:05:00Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be8e6ce2-a920-4752-bfd0-71815c5e0", "eventTime": "2019-05-15T10:05:00Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be8e6ce2-a920-4752-bfd0-71815c5e0", "record_id": "flaws_cloudtrail:0000074:be8e6ce2-a920-4752-bfd0-71815c5e0", "row_index": 74, "timestamp": "2019-05-15T10:05:00Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be8e6ce2-a920-4752-bfd0-71815c5e0", "eventTime": "2019-05-15T10:05:00Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fcd291-2985-4144-81a4-237c02ac2ffe", "record_id": "flaws_cloudtrail:0000075:71fcd291-2985-4144-81a4-237c02ac2ffe", "row_index": 75, "timestamp": "2019-05-15T10:05:30Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fcd291-2985-4144-81a4-237c02ac2ffe", "eventTime": "2019-05-15T10:05:30Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {"items": [{"user": "self"}]}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71fcd291-2985-4144-81a4-237c02ac2ffe", "record_id": "flaws_cloudtrail:0000076:71fcd291-2985-4144-81a4-237c02ac2ffe", "row_index": 76, "timestamp": "2019-05-15T10:05:30Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71fcd291-2985-4144-81a4-237c02ac2ffe", "eventTime": "2019-05-15T10:05:30Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {"items": [{"user": "self"}]}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39ee5389-c4b2-48ab-a12a-e8c122f643fa", "record_id": "flaws_cloudtrail:0000077:39ee5389-c4b2-48ab-a12a-e8c122f643fa", "row_index": 77, "timestamp": "2019-05-15T10:05:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39ee5389-c4b2-48ab-a12a-e8c122f643fa", "eventTime": "2019-05-15T10:05:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39ee5389-c4b2-48ab-a12a-e8c122f643fa", "record_id": "flaws_cloudtrail:0000078:39ee5389-c4b2-48ab-a12a-e8c122f643fa", "row_index": 78, "timestamp": "2019-05-15T10:05:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39ee5389-c4b2-48ab-a12a-e8c122f643fa", "eventTime": "2019-05-15T10:05:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b0003ff-ffb0-41e1-b733-b8ffff3b7f83", "record_id": "flaws_cloudtrail:0000079:5b0003ff-ffb0-41e1-b733-b8ffff3b7f83", "row_index": 79, "timestamp": "2019-05-15T10:06:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b0003ff-ffb0-41e1-b733-b8ffff3b7f83", "eventTime": "2019-05-15T10:06:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {"items": [{"user": "811596193553"}]}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b0003ff-ffb0-41e1-b733-b8ffff3b7f83", "record_id": "flaws_cloudtrail:0000080:5b0003ff-ffb0-41e1-b733-b8ffff3b7f83", "row_index": 80, "timestamp": "2019-05-15T10:06:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b0003ff-ffb0-41e1-b733-b8ffff3b7f83", "eventTime": "2019-05-15T10:06:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {"items": [{"user": "811596193553"}]}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072792-d7a3-43e0-912e-4bfb6d86da51", "record_id": "flaws_cloudtrail:0000081:072792-d7a3-43e0-912e-4bfb6d86da51", "row_index": 81, "timestamp": "2019-05-15T10:07:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072792-d7a3-43e0-912e-4bfb6d86da51", "eventTime": "2019-05-15T10:07:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072792-d7a3-43e0-912e-4bfb6d86da51", "record_id": "flaws_cloudtrail:0000082:072792-d7a3-43e0-912e-4bfb6d86da51", "row_index": 82, "timestamp": "2019-05-15T10:07:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072792-d7a3-43e0-912e-4bfb6d86da51", "eventTime": "2019-05-15T10:07:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c8a4717-7a22-4064-8ac3-517c63165ff", "record_id": "flaws_cloudtrail:0000083:9c8a4717-7a22-4064-8ac3-517c63165ff", "row_index": 83, "timestamp": "2019-05-15T10:10:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c8a4717-7a22-4064-8ac3-517c63165ff", "eventTime": "2019-05-15T10:10:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c8a4717-7a22-4064-8ac3-517c63165ff", "record_id": "flaws_cloudtrail:0000084:9c8a4717-7a22-4064-8ac3-517c63165ff", "row_index": 84, "timestamp": "2019-05-15T10:10:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c8a4717-7a22-4064-8ac3-517c63165ff", "eventTime": "2019-05-15T10:10:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6440dc11-adae-44e1-9ad2-210bee3bb00f", "record_id": "flaws_cloudtrail:0000085:6440dc11-adae-44e1-9ad2-210bee3bb00f", "row_index": 85, "timestamp": "2019-05-15T10:10:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6440dc11-adae-44e1-9ad2-210bee3bb00f", "eventTime": "2019-05-15T10:10:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyeVZvQlVzY1ZYZkVpQkVFMTZhbldPQkx2Z2pCditoQlR2MjY1MWFqOEJlak1PODcxSjgxSURTMjMrTXdraGs2YlRHcnpjWXV4UUZ3dFkzYTRZZlg0dmZOaFpHTE0xTW84N2htZGkxRGgvQ3c1RGxHTStZekpISXV2YVppdFhMc2VFclBQdU1zdUttUU9TNGwxU1J4eTFOS25zZlNZT05vYUl0RjZibXYzejJIQVVEQlI5azQxaE8zTWV1WXl4bUpzakxBMVh1RjJKdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6440dc11-adae-44e1-9ad2-210bee3bb00f", "record_id": "flaws_cloudtrail:0000086:6440dc11-adae-44e1-9ad2-210bee3bb00f", "row_index": 86, "timestamp": "2019-05-15T10:10:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6440dc11-adae-44e1-9ad2-210bee3bb00f", "eventTime": "2019-05-15T10:10:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyeVZvQlVzY1ZYZkVpQkVFMTZhbldPQkx2Z2pCditoQlR2MjY1MWFqOEJlak1PODcxSjgxSURTMjMrTXdraGs2YlRHcnpjWXV4UUZ3dFkzYTRZZlg0dmZOaFpHTE0xTW84N2htZGkxRGgvQ3c1RGxHTStZekpISXV2YVppdFhMc2VFclBQdU1zdUttUU9TNGwxU1J4eTFOS25zZlNZT05vYUl0RjZibXYzejJIQVVEQlI5azQxaE8zTWV1WXl4bUpzakxBMVh1RjJKdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2baa1e3e-cd16-41a3-ab9f-7ea0dd45b065", "record_id": "flaws_cloudtrail:0000087:2baa1e3e-cd16-41a3-ab9f-7ea0dd45b065", "row_index": 87, "timestamp": "2019-05-15T10:10:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2baa1e3e-cd16-41a3-ab9f-7ea0dd45b065", "eventTime": "2019-05-15T10:10:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bFdHbVlCMmJUTExDR0ZZNTJJM0V5NEFHQjdXNUJLcVR2a1hQQlRlcWI5SW0ydFg3bnhDanpWK3VCTmZHTU9zWWtucGd0RE8wRGhBTFNISUQ4T0d2ZHVKNkJZemZJUSs5ZVEvVG5YK0J6Qll2dHBWUCtGV2lXNmQ5eWVyNjJDV24wazVreEZPTDY2WlZYVDI3bzNwQnZyanp3TE81cTAxVGxGSjZZQWhKdFJxWHErRjZBeGtVdlg2QTRsQ3pyR1RxTGNFTW9HS0JOckkydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2baa1e3e-cd16-41a3-ab9f-7ea0dd45b065", "record_id": "flaws_cloudtrail:0000088:2baa1e3e-cd16-41a3-ab9f-7ea0dd45b065", "row_index": 88, "timestamp": "2019-05-15T10:10:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2baa1e3e-cd16-41a3-ab9f-7ea0dd45b065", "eventTime": "2019-05-15T10:10:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bFdHbVlCMmJUTExDR0ZZNTJJM0V5NEFHQjdXNUJLcVR2a1hQQlRlcWI5SW0ydFg3bnhDanpWK3VCTmZHTU9zWWtucGd0RE8wRGhBTFNISUQ4T0d2ZHVKNkJZemZJUSs5ZVEvVG5YK0J6Qll2dHBWUCtGV2lXNmQ5eWVyNjJDV24wazVreEZPTDY2WlZYVDI3bzNwQnZyanp3TE81cTAxVGxGSjZZQWhKdFJxWHErRjZBeGtVdlg2QTRsQ3pyR1RxTGNFTW9HS0JOckkydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3602bb1c-d55d-4c83-811d-d68531248f28", "record_id": "flaws_cloudtrail:0000089:3602bb1c-d55d-4c83-811d-d68531248f28", "row_index": 89, "timestamp": "2019-05-15T10:11:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3602bb1c-d55d-4c83-811d-d68531248f28", "eventTime": "2019-05-15T10:11:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNUtKd1BNSnI5eElmY1dERTRGTVAvVzNvcll0anNodE83UTBtUWlvcWNpMU5rNFdLc1k2cS91UnhOaHNCVG5saVhWV0cvZzlJRjhSUks0Qk9CYTlCYy9GZFo2ZXMxMllvaVJBaHh5WWZsaVQ1Y25BTlJOVVBYTVBuaGlPdVNzRllWRW9VVmhxM1d1WWkwLzBORk1TaG1ZVE1rTkM0STVSZFVWYkF1bGt4VGxITjJiYkJrTVBhS3lPUW83c3c0NTA2L0IwQTR6V0hUeHNFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3602bb1c-d55d-4c83-811d-d68531248f28", "record_id": "flaws_cloudtrail:0000090:3602bb1c-d55d-4c83-811d-d68531248f28", "row_index": 90, "timestamp": "2019-05-15T10:11:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3602bb1c-d55d-4c83-811d-d68531248f28", "eventTime": "2019-05-15T10:11:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRNUtKd1BNSnI5eElmY1dERTRGTVAvVzNvcll0anNodE83UTBtUWlvcWNpMU5rNFdLc1k2cS91UnhOaHNCVG5saVhWV0cvZzlJRjhSUks0Qk9CYTlCYy9GZFo2ZXMxMllvaVJBaHh5WWZsaVQ1Y25BTlJOVVBYTVBuaGlPdVNzRllWRW9VVmhxM1d1WWkwLzBORk1TaG1ZVE1rTkM0STVSZFVWYkF1bGt4VGxITjJiYkJrTVBhS3lPUW83c3c0NTA2L0IwQTR6V0hUeHNFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4fd8df9-e595-4464-b3fd-0faf08f2dd1a", "record_id": "flaws_cloudtrail:0000091:d4fd8df9-e595-4464-b3fd-0faf08f2dd1a", "row_index": 91, "timestamp": "2019-05-15T10:11:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4fd8df9-e595-4464-b3fd-0faf08f2dd1a", "eventTime": "2019-05-15T10:11:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmSzNwV0J4ZDBRQ3dmOU4zclJISCtEQVcrd1ZOWkMvZUxoSjBpb3VkaTJQMGp5ZmVreVFIaVdncHZtZHN3MzgzQTlBS0d1eVJaK0lNazNYcGlIZnVXQ2lmUFlEY2Y3bGdjVWVqcTd2aDdqYWExbVZjSWhEZmJVYlNnL2V2M0JadlR4MnZuWmptczR4Z0l0Q09wSCtPZ0NOTm81dHdtN1d2S3FZcytuLzNMYlE0MHM1NWdZb25LL3orNWMvdElnYi9RbGVEWlhMViIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4fd8df9-e595-4464-b3fd-0faf08f2dd1a", "record_id": "flaws_cloudtrail:0000092:d4fd8df9-e595-4464-b3fd-0faf08f2dd1a", "row_index": 92, "timestamp": "2019-05-15T10:11:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4fd8df9-e595-4464-b3fd-0faf08f2dd1a", "eventTime": "2019-05-15T10:11:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmSzNwV0J4ZDBRQ3dmOU4zclJISCtEQVcrd1ZOWkMvZUxoSjBpb3VkaTJQMGp5ZmVreVFIaVdncHZtZHN3MzgzQTlBS0d1eVJaK0lNazNYcGlIZnVXQ2lmUFlEY2Y3bGdjVWVqcTd2aDdqYWExbVZjSWhEZmJVYlNnL2V2M0JadlR4MnZuWmptczR4Z0l0Q09wSCtPZ0NOTm81dHdtN1d2S3FZcytuLzNMYlE0MHM1NWdZb25LL3orNWMvdElnYi9RbGVEWlhMViIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a043851ab-a30e-4e12-93ca-d2d85c3f58b1", "record_id": "flaws_cloudtrail:0000093:a043851ab-a30e-4e12-93ca-d2d85c3f58b1", "row_index": 93, "timestamp": "2019-05-15T10:11:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a043851ab-a30e-4e12-93ca-d2d85c3f58b1", "eventTime": "2019-05-15T10:11:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMQW5PY1BBVXlXcVVWWThmT2k0OGxwK1gyS2hrdmFlRHJDejg1TE55dndMbkxQeU1ZZW9CZ0ZRRmsrTWRabjlLekptQ1RKZm5nZGU4L3AvdFQ0OVNzaXVlUnBsUEsvU0tKNm1lb0Z3UFBWZHFORVpVS0J4VXVtemRSNXhJVEdkTzFJWWh0NUs4WVhYanZjbElvM1hqdzVvbjc4OHYwMjM3YkJEZVdTUDdnMWZaaEJ6ZDNqdk9HYzJFSFNYNTA5SDc5OFdyeXk1aEZsTjBhdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a043851ab-a30e-4e12-93ca-d2d85c3f58b1", "record_id": "flaws_cloudtrail:0000094:a043851ab-a30e-4e12-93ca-d2d85c3f58b1", "row_index": 94, "timestamp": "2019-05-15T10:11:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a043851ab-a30e-4e12-93ca-d2d85c3f58b1", "eventTime": "2019-05-15T10:11:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMQW5PY1BBVXlXcVVWWThmT2k0OGxwK1gyS2hrdmFlRHJDejg1TE55dndMbkxQeU1ZZW9CZ0ZRRmsrTWRabjlLekptQ1RKZm5nZGU4L3AvdFQ0OVNzaXVlUnBsUEsvU0tKNm1lb0Z3UFBWZHFORVpVS0J4VXVtemRSNXhJVEdkTzFJWWh0NUs4WVhYanZjbElvM1hqdzVvbjc4OHYwMjM3YkJEZVdTUDdnMWZaaEJ6ZDNqdk9HYzJFSFNYNTA5SDc5OFdyeXk1aEZsTjBhdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698cd7c4-4984-48cc-9955-20bc4e854907", "record_id": "flaws_cloudtrail:0000095:698cd7c4-4984-48cc-9955-20bc4e854907", "row_index": 95, "timestamp": "2019-05-15T10:11:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698cd7c4-4984-48cc-9955-20bc4e854907", "eventTime": "2019-05-15T10:11:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIybGNoV0ZaZitXSmJ6Nm5Jc05UZy94Q2lpb3d1Z3NPdWZGOWVRNDNLdGlhRXlHSVo2VVRLYWIyUHp3Tlkzc1JwT3Y0UkQ5NlJPVWFCaDVvTXppU2kwV3UrT0tveFdGMFQ0YmpMNC9yUGxVOUNyRHRZaUJrYWZCNFJZbXdOcFoxKzNNMlNkbkVCamQ0RitBNk5wL2NvYWtrSElYOVY4cUJ2VXkrNW9kck9VY3kyOFlKZXI0WUdEejZYbTMxcDk0RVNZUndZdUgvOWxLRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698cd7c4-4984-48cc-9955-20bc4e854907", "record_id": "flaws_cloudtrail:0000096:698cd7c4-4984-48cc-9955-20bc4e854907", "row_index": 96, "timestamp": "2019-05-15T10:11:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698cd7c4-4984-48cc-9955-20bc4e854907", "eventTime": "2019-05-15T10:11:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIybGNoV0ZaZitXSmJ6Nm5Jc05UZy94Q2lpb3d1Z3NPdWZGOWVRNDNLdGlhRXlHSVo2VVRLYWIyUHp3Tlkzc1JwT3Y0UkQ5NlJPVWFCaDVvTXppU2kwV3UrT0tveFdGMFQ0YmpMNC9yUGxVOUNyRHRZaUJrYWZCNFJZbXdOcFoxKzNNMlNkbkVCamQ0RitBNk5wL2NvYWtrSElYOVY4cUJ2VXkrNW9kck9VY3kyOFlKZXI0WUdEejZYbTMxcDk0RVNZUndZdUgvOWxLRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14516bf1-80b1-47e6-bc07-a8471c8290f3", "record_id": "flaws_cloudtrail:0000097:14516bf1-80b1-47e6-bc07-a8471c8290f3", "row_index": 97, "timestamp": "2019-05-15T10:11:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14516bf1-80b1-47e6-bc07-a8471c8290f3", "eventTime": "2019-05-15T10:11:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwZTlmbktPUTZyNDRiQjZOS0JzS0l1N2xkR24ybnNTN0ZXSjFGeWFITG1UeE04VzJ3QWdoeC9meVJnd0twQjZNd0RBam1QR2U1SkdsTTcwN2h3RENJVUl6MFFuYlJOdzlIUUY2ZnRmRmErd08wWXcvS24xNmtmYkZoQnV1NlRzN3RNUzhLOGF2SzNWZDNqTzZJa0FWamVlWlZVOXBabzVZbEIwY04xSUgyNFgwdlo5WlU1N2NmMC8wNEZoYXpuRWROdytYVEE1OUoxSnlUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14516bf1-80b1-47e6-bc07-a8471c8290f3", "record_id": "flaws_cloudtrail:0000098:14516bf1-80b1-47e6-bc07-a8471c8290f3", "row_index": 98, "timestamp": "2019-05-15T10:11:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14516bf1-80b1-47e6-bc07-a8471c8290f3", "eventTime": "2019-05-15T10:11:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwZTlmbktPUTZyNDRiQjZOS0JzS0l1N2xkR24ybnNTN0ZXSjFGeWFITG1UeE04VzJ3QWdoeC9meVJnd0twQjZNd0RBam1QR2U1SkdsTTcwN2h3RENJVUl6MFFuYlJOdzlIUUY2ZnRmRmErd08wWXcvS24xNmtmYkZoQnV1NlRzN3RNUzhLOGF2SzNWZDNqTzZJa0FWamVlWlZVOXBabzVZbEIwY04xSUgyNFgwdlo5WlU1N2NmMC8wNEZoYXpuRWROdytYVEE1OUoxSnlUQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab537cad-215b-4066-87d4-7d1de37dec77", "record_id": "flaws_cloudtrail:0000099:ab537cad-215b-4066-87d4-7d1de37dec77", "row_index": 99, "timestamp": "2019-05-15T10:11:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab537cad-215b-4066-87d4-7d1de37dec77", "eventTime": "2019-05-15T10:11:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKR0h3OUVuQkF3ZWRBRE1XNW1IeEUzRFdkQlc5WVJvcFNMUHIxamxZMS82N1EzenZ2SGVUcUpxYktycDdzYWZXQjdxTWJsQSs4KzZXT2dRMXlkYWh5NFc5VlNrV0sydXpYalpBd29KRGYyTTU0RUE1QnRDRVNLSE0wM2N0TlVuTmkrRFE5OUVNUldiSExIcjZkOUJiS3FpZnBUQVdKSEJxOWV5VzU1RU0weEVJS2hNaXExK2Y0dzQzNk9oVVVJKzN2bno2WWpnak8rSFJiZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab537cad-215b-4066-87d4-7d1de37dec77", "record_id": "flaws_cloudtrail:0000100:ab537cad-215b-4066-87d4-7d1de37dec77", "row_index": 100, "timestamp": "2019-05-15T10:11:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab537cad-215b-4066-87d4-7d1de37dec77", "eventTime": "2019-05-15T10:11:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKR0h3OUVuQkF3ZWRBRE1XNW1IeEUzRFdkQlc5WVJvcFNMUHIxamxZMS82N1EzenZ2SGVUcUpxYktycDdzYWZXQjdxTWJsQSs4KzZXT2dRMXlkYWh5NFc5VlNrV0sydXpYalpBd29KRGYyTTU0RUE1QnRDRVNLSE0wM2N0TlVuTmkrRFE5OUVNUldiSExIcjZkOUJiS3FpZnBUQVdKSEJxOWV5VzU1RU0weEVJS2hNaXExK2Y0dzQzNk9oVVVJKzN2bno2WWpnak8rSFJiZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "713428bd-305c-4f67-9883-dae2567cca94", "record_id": "flaws_cloudtrail:0000101:713428bd-305c-4f67-9883-dae2567cca94", "row_index": 101, "timestamp": "2019-05-15T10:11:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "713428bd-305c-4f67-9883-dae2567cca94", "eventTime": "2019-05-15T10:11:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNL01sVDJmVWhDdWlRRXZPWTNsaSt5WGliNEQ3UlphdE8vc29NVGliaTFlM2RHa0tIVUozWXlmQ2VvYTVtQklXV1B1TjVqVVdBTThBQ2pjeVpUWXFDdFNKUGtNK0toUy92SmVwZFUyWksxTkhJYzc1WnI4YUp3SzJtWW5XaG93ak1NTTJONFdOeGRCR3NhOWdGeVhROFd0NzVaNnNpYWF1YUI4d3BURDZkYjNCY2plK1FSYzhqaGhENXdwYnpxREJhVkF6OC9RRVNsUEVNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "713428bd-305c-4f67-9883-dae2567cca94", "record_id": "flaws_cloudtrail:0000102:713428bd-305c-4f67-9883-dae2567cca94", "row_index": 102, "timestamp": "2019-05-15T10:11:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "713428bd-305c-4f67-9883-dae2567cca94", "eventTime": "2019-05-15T10:11:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNL01sVDJmVWhDdWlRRXZPWTNsaSt5WGliNEQ3UlphdE8vc29NVGliaTFlM2RHa0tIVUozWXlmQ2VvYTVtQklXV1B1TjVqVVdBTThBQ2pjeVpUWXFDdFNKUGtNK0toUy92SmVwZFUyWksxTkhJYzc1WnI4YUp3SzJtWW5XaG93ak1NTTJONFdOeGRCR3NhOWdGeVhROFd0NzVaNnNpYWF1YUI4d3BURDZkYjNCY2plK1FSYzhqaGhENXdwYnpxREJhVkF6OC9RRVNsUEVNUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72267ea-2b3a-43b9-b116-55183edbf26c", "record_id": "flaws_cloudtrail:0000103:d72267ea-2b3a-43b9-b116-55183edbf26c", "row_index": 103, "timestamp": "2019-05-15T10:11:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72267ea-2b3a-43b9-b116-55183edbf26c", "eventTime": "2019-05-15T10:11:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaOXZkRFBTc2F0ZjVRL0dkUmNuMzlhYzREZUIxczZudFBMUk5Kc29aa3pWVExRRStOYWxYdUFXSnM4NTE2ZTRhaFZ1TU9VR002b0NIK1QvVHgzVkNEZmZsRmpDSVpNRU42RXoxVGRmMndpY3VackxsMEY0TkdsajhDTHFiTGlVbkNMQWVrVFRyRU9oSU1XME9qMllNN1ZIN1FNMXZBZ24wejFIbTNyTmlrbkJMWUlVdWxzdUkvRUVzQjJYcmVvK1lrazcvNnV4N2pBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72267ea-2b3a-43b9-b116-55183edbf26c", "record_id": "flaws_cloudtrail:0000104:d72267ea-2b3a-43b9-b116-55183edbf26c", "row_index": 104, "timestamp": "2019-05-15T10:11:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72267ea-2b3a-43b9-b116-55183edbf26c", "eventTime": "2019-05-15T10:11:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaOXZkRFBTc2F0ZjVRL0dkUmNuMzlhYzREZUIxczZudFBMUk5Kc29aa3pWVExRRStOYWxYdUFXSnM4NTE2ZTRhaFZ1TU9VR002b0NIK1QvVHgzVkNEZmZsRmpDSVpNRU42RXoxVGRmMndpY3VackxsMEY0TkdsajhDTHFiTGlVbkNMQWVrVFRyRU9oSU1XME9qMllNN1ZIN1FNMXZBZ24wejFIbTNyTmlrbkJMWUlVdWxzdUkvRUVzQjJYcmVvK1lrazcvNnV4N2pBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a139f90e-d0e0-4e09-a154-1c0ea78a7aff", "record_id": "flaws_cloudtrail:0000105:a139f90e-d0e0-4e09-a154-1c0ea78a7aff", "row_index": 105, "timestamp": "2019-05-15T10:11:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a139f90e-d0e0-4e09-a154-1c0ea78a7aff", "eventTime": "2019-05-15T10:11:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzOTg1M3BqejdlakUzOWFnWTNub2d2ckNlS2ZGL0IrZ1RaekdldDNqdWtOZFJ4Vy8zZk5hNC9Ha28yMlpveFJCaE9tNUxpZ25kT2xMa0I1dTNjOWJITVdDbjFxbkdnNUV3ZUdXMUlCWllvaWpRZWtydzRLbUlZM0tTUU9sRU5BK0lPQTFkS2tZb1dqMmRGcnIrcWN1Wmh6UFhFbHJXbk5jMUJ5RDBLV3FFTi9TN1RhL014djRESHlOM01ObmdleXJUUW1ESDBBKzZOcDR3UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a139f90e-d0e0-4e09-a154-1c0ea78a7aff", "record_id": "flaws_cloudtrail:0000106:a139f90e-d0e0-4e09-a154-1c0ea78a7aff", "row_index": 106, "timestamp": "2019-05-15T10:11:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a139f90e-d0e0-4e09-a154-1c0ea78a7aff", "eventTime": "2019-05-15T10:11:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzOTg1M3BqejdlakUzOWFnWTNub2d2ckNlS2ZGL0IrZ1RaekdldDNqdWtOZFJ4Vy8zZk5hNC9Ha28yMlpveFJCaE9tNUxpZ25kT2xMa0I1dTNjOWJITVdDbjFxbkdnNUV3ZUdXMUlCWllvaWpRZWtydzRLbUlZM0tTUU9sRU5BK0lPQTFkS2tZb1dqMmRGcnIrcWN1Wmh6UFhFbHJXbk5jMUJ5RDBLV3FFTi9TN1RhL014djRESHlOM01ObmdleXJUUW1ESDBBKzZOcDR3UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b805a139-5a14-49ed-b1c9-e9abf051372a", "record_id": "flaws_cloudtrail:0000107:b805a139-5a14-49ed-b1c9-e9abf051372a", "row_index": 107, "timestamp": "2019-05-15T10:11:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b805a139-5a14-49ed-b1c9-e9abf051372a", "eventTime": "2019-05-15T10:11:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrS0UvOWNvdmFSWVV0bTA0RWRva1o5SjZ6Y3B6bnNoOUZFdjJ2dElQcHQ1UmVsYlRRSFdPVHcrUGF2U3lYZVIzVTkvaHVSN0lCOGduOS9ET2labFRGaWxrOEs4VW1mUHJ1dk5rRlMwcUhZc0Y2dHBkUTQwRTVYd3h6U2NrZ0haaUNoczI2Z2ZBZ0tUU1hJNW5zOGhvVlpZaHFVWEFleFc3SU4waGZlQlBiRVZLTG13VlB0OFM0UHhOUGRiWjUzWW94OGZEQWxDQUZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b805a139-5a14-49ed-b1c9-e9abf051372a", "record_id": "flaws_cloudtrail:0000108:b805a139-5a14-49ed-b1c9-e9abf051372a", "row_index": 108, "timestamp": "2019-05-15T10:11:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b805a139-5a14-49ed-b1c9-e9abf051372a", "eventTime": "2019-05-15T10:11:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrS0UvOWNvdmFSWVV0bTA0RWRva1o5SjZ6Y3B6bnNoOUZFdjJ2dElQcHQ1UmVsYlRRSFdPVHcrUGF2U3lYZVIzVTkvaHVSN0lCOGduOS9ET2labFRGaWxrOEs4VW1mUHJ1dk5rRlMwcUhZc0Y2dHBkUTQwRTVYd3h6U2NrZ0haaUNoczI2Z2ZBZ0tUU1hJNW5zOGhvVlpZaHFVWEFleFc3SU4waGZlQlBiRVZLTG13VlB0OFM0UHhOUGRiWjUzWW94OGZEQWxDQUZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73536f20-c185-49ca-b051-5ea2045bed15", "record_id": "flaws_cloudtrail:0000109:73536f20-c185-49ca-b051-5ea2045bed15", "row_index": 109, "timestamp": "2019-05-15T10:11:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73536f20-c185-49ca-b051-5ea2045bed15", "eventTime": "2019-05-15T10:11:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNXdxRDl2TVdJVVhSdTNycG5xRnA0eElkNFBScFRZTVFlY2hGTEd1b0hCbHMzMmZMRzJ1djR5bTBNU3MwQndnYW9BTGRBL1ovS3FtWFZ4U1E2ZVU4Ty96Y2pxa1QxcU9lNVJXc1AvUnlGaWIyTHNWWVIvWlBYRXF4dUdNc1JEcVZTekdBMTdFRmkvSmZwU013S0ZscXJLSFJ1d1J6bUFFaHFybWJIK3dTNk13YlMyL3gxaXlCRUxRdnNkVlNJeW9VMHNVUnNlWUl1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73536f20-c185-49ca-b051-5ea2045bed15", "record_id": "flaws_cloudtrail:0000110:73536f20-c185-49ca-b051-5ea2045bed15", "row_index": 110, "timestamp": "2019-05-15T10:11:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73536f20-c185-49ca-b051-5ea2045bed15", "eventTime": "2019-05-15T10:11:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNNXdxRDl2TVdJVVhSdTNycG5xRnA0eElkNFBScFRZTVFlY2hGTEd1b0hCbHMzMmZMRzJ1djR5bTBNU3MwQndnYW9BTGRBL1ovS3FtWFZ4U1E2ZVU4Ty96Y2pxa1QxcU9lNVJXc1AvUnlGaWIyTHNWWVIvWlBYRXF4dUdNc1JEcVZTekdBMTdFRmkvSmZwU013S0ZscXJLSFJ1d1J6bUFFaHFybWJIK3dTNk13YlMyL3gxaXlCRUxRdnNkVlNJeW9VMHNVUnNlWUl1ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d7317f-ec6d-42eb-818a-d02727bb97b2", "record_id": "flaws_cloudtrail:0000111:f9d7317f-ec6d-42eb-818a-d02727bb97b2", "row_index": 111, "timestamp": "2019-05-15T10:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d7317f-ec6d-42eb-818a-d02727bb97b2", "eventTime": "2019-05-15T10:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJT1ZFcDhwbktseXVvbWU4YkJ5UXNHeEFVdjFyVHZDVk9iODRidmpDbEY4TVhRaDQ5YXkvQmQwemFydVV2c1YrK3pKcy9CV2FYQlQ3U3RZTGZSU2JoQnpNNGtZSGpVMzhYZXA2ZEtVeUp0Umd3VHBWWmRYT29NNERmUUloaFlwSm0vb3B4MEowdUg3MmQwd1FrRW1UakNwanZaV1grOTdpYnFFWVNnb3YxQ21HcjVRNVZwaDBETnJmcDg4ejFHcUhLbVlZckRxZkdRQVpraDBIc1ZkUnA5Y24veks0UnprPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac14e4a-9f35-4ac4-aad8-66f0bcbb68e7", "record_id": "flaws_cloudtrail:0000112:bac14e4a-9f35-4ac4-aad8-66f0bcbb68e7", "row_index": 112, "timestamp": "2019-05-15T10:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac14e4a-9f35-4ac4-aad8-66f0bcbb68e7", "eventTime": "2019-05-15T10:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBbFoyRm16ZGZHRTVpMi9XUk5FaVBUWU1rWVFKdFBtQVlNR1BpV2UzN0RlOGdJZ1lsdVU4S1pndXJEQjhlUExxU2lwK2J2d0lBd3BUVkxUVk01Mis3ODZZZWxjamRqWVZMbER1SlpTV0xweFMwa3RHM2xoZUpIV1puVHpFcURtaVdPdzdob1ZOa2V3UWx0QnkydDVDNE9jTUUzcEtQN08yVjJVem1oZDlxMXVZejBpaUs1WWlLT2VONG9VQ2RXMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d7317f-ec6d-42eb-818a-d02727bb97b2", "record_id": "flaws_cloudtrail:0000113:f9d7317f-ec6d-42eb-818a-d02727bb97b2", "row_index": 113, "timestamp": "2019-05-15T10:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d7317f-ec6d-42eb-818a-d02727bb97b2", "eventTime": "2019-05-15T10:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJT1ZFcDhwbktseXVvbWU4YkJ5UXNHeEFVdjFyVHZDVk9iODRidmpDbEY4TVhRaDQ5YXkvQmQwemFydVV2c1YrK3pKcy9CV2FYQlQ3U3RZTGZSU2JoQnpNNGtZSGpVMzhYZXA2ZEtVeUp0Umd3VHBWWmRYT29NNERmUUloaFlwSm0vb3B4MEowdUg3MmQwd1FrRW1UakNwanZaV1grOTdpYnFFWVNnb3YxQ21HcjVRNVZwaDBETnJmcDg4ejFHcUhLbVlZckRxZkdRQVpraDBIc1ZkUnA5Y24veks0UnprPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac14e4a-9f35-4ac4-aad8-66f0bcbb68e7", "record_id": "flaws_cloudtrail:0000114:bac14e4a-9f35-4ac4-aad8-66f0bcbb68e7", "row_index": 114, "timestamp": "2019-05-15T10:11:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac14e4a-9f35-4ac4-aad8-66f0bcbb68e7", "eventTime": "2019-05-15T10:11:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBbFoyRm16ZGZHRTVpMi9XUk5FaVBUWU1rWVFKdFBtQVlNR1BpV2UzN0RlOGdJZ1lsdVU4S1pndXJEQjhlUExxU2lwK2J2d0lBd3BUVkxUVk01Mis3ODZZZWxjamRqWVZMbER1SlpTV0xweFMwa3RHM2xoZUpIV1puVHpFcURtaVdPdzdob1ZOa2V3UWx0QnkydDVDNE9jTUUzcEtQN08yVjJVem1oZDlxMXVZejBpaUs1WWlLT2VONG9VQ2RXMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a59f9504-9491-4674-90d5-f96e404be161", "record_id": "flaws_cloudtrail:0000115:a59f9504-9491-4674-90d5-f96e404be161", "row_index": 115, "timestamp": "2019-05-15T10:11:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a59f9504-9491-4674-90d5-f96e404be161", "eventTime": "2019-05-15T10:11:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNGVtS3JpVmZZRTFHcTV3RlFNV2VqcmFDNU4vbm4zbVhXd2NIUUl6NTZ1MitZUDZwUmMvb3VUU29paGhwc25LR3ZiWnFMMkJJcXRPVG1lemU3enZObjNGaGJUY0RCaVJyZlgza1hlay81UCtZdEZ3UlB6NkVWeE8zQ0dnU0lqWS9KREwzbEhvekhMbElpdTNEazVJMlJrdGxBd2tyNTltdlk3SkM0aGw5OTd0UmVQMVU2RUFPRTZ0Z0xkN2hDTkJBWW9XWlVRUnUwS0J4WGRPVXgvQXA5ZzNFZWJsOVJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a59f9504-9491-4674-90d5-f96e404be161", "record_id": "flaws_cloudtrail:0000116:a59f9504-9491-4674-90d5-f96e404be161", "row_index": 116, "timestamp": "2019-05-15T10:11:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a59f9504-9491-4674-90d5-f96e404be161", "eventTime": "2019-05-15T10:11:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNGVtS3JpVmZZRTFHcTV3RlFNV2VqcmFDNU4vbm4zbVhXd2NIUUl6NTZ1MitZUDZwUmMvb3VUU29paGhwc25LR3ZiWnFMMkJJcXRPVG1lemU3enZObjNGaGJUY0RCaVJyZlgza1hlay81UCtZdEZ3UlB6NkVWeE8zQ0dnU0lqWS9KREwzbEhvekhMbElpdTNEazVJMlJrdGxBd2tyNTltdlk3SkM0aGw5OTd0UmVQMVU2RUFPRTZ0Z0xkN2hDTkJBWW9XWlVRUnUwS0J4WGRPVXgvQXA5ZzNFZWJsOVJNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6108aab-8218-4aa4-b336-e6b261c8c100", "record_id": "flaws_cloudtrail:0000117:e6108aab-8218-4aa4-b336-e6b261c8c100", "row_index": 117, "timestamp": "2019-05-15T10:11:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6108aab-8218-4aa4-b336-e6b261c8c100", "eventTime": "2019-05-15T10:11:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGb0FYL2dtSkFMSG9uQ09aT0ptaGsydXV0SDNQUEgxWmxReExMdlJlWnVVNkNZeHMxMjhXUzN5M1gzSkNKYUpEcXZENmJtRVZ4SGdqQWFld2Nsb1RDdGhuNVFXSEU5NVE3ZGJKRGJQZ0N6Qi9PbHFqZWhKUWkwWTdXeHROL1JTWFUwc25FeGVGamx1SzF1bGJsZDVOZnNYUEZaK0lrZ0FqM21pZEI3OUJDRkVacmJBMVJwOXNyVWRqdE1IWlV5bUNGTk85b3RtVVVYM2ZzaUk1RWV1TFRBcmN4MkNJZW9zPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6108aab-8218-4aa4-b336-e6b261c8c100", "record_id": "flaws_cloudtrail:0000118:e6108aab-8218-4aa4-b336-e6b261c8c100", "row_index": 118, "timestamp": "2019-05-15T10:11:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6108aab-8218-4aa4-b336-e6b261c8c100", "eventTime": "2019-05-15T10:11:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGb0FYL2dtSkFMSG9uQ09aT0ptaGsydXV0SDNQUEgxWmxReExMdlJlWnVVNkNZeHMxMjhXUzN5M1gzSkNKYUpEcXZENmJtRVZ4SGdqQWFld2Nsb1RDdGhuNVFXSEU5NVE3ZGJKRGJQZ0N6Qi9PbHFqZWhKUWkwWTdXeHROL1JTWFUwc25FeGVGamx1SzF1bGJsZDVOZnNYUEZaK0lrZ0FqM21pZEI3OUJDRkVacmJBMVJwOXNyVWRqdE1IWlV5bUNGTk85b3RtVVVYM2ZzaUk1RWV1TFRBcmN4MkNJZW9zPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6e1283a-6c8b-45dc-8279-c786a7cd9e6b", "record_id": "flaws_cloudtrail:0000119:e6e1283a-6c8b-45dc-8279-c786a7cd9e6b", "row_index": 119, "timestamp": "2019-05-15T10:11:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6e1283a-6c8b-45dc-8279-c786a7cd9e6b", "eventTime": "2019-05-15T10:11:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZzRiVFVINU4vdTFHK3BoeVljV2Y2NW8vZkZod3lyc21VeU5TWEhlMklFa3B4ZE5KNmRWMTJ5SS90RnFUQkQwR3ZlVm4vT00vTDNWdE12NlM1NG1EUWFrazBZTmx5czJXMWRkckprdDVMbDYrR0tOa2dxWmdWbWIvU1dXT3BBakRnZ25YWjZ4ak9zemZBdWt1SlpPTm9PUitLcHU3QVBodzhCZTB5ckJuQzJUa3p4dk1RSGpIb3JBNGhDdFMrMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6e1283a-6c8b-45dc-8279-c786a7cd9e6b", "record_id": "flaws_cloudtrail:0000120:e6e1283a-6c8b-45dc-8279-c786a7cd9e6b", "row_index": 120, "timestamp": "2019-05-15T10:11:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6e1283a-6c8b-45dc-8279-c786a7cd9e6b", "eventTime": "2019-05-15T10:11:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEZzRiVFVINU4vdTFHK3BoeVljV2Y2NW8vZkZod3lyc21VeU5TWEhlMklFa3B4ZE5KNmRWMTJ5SS90RnFUQkQwR3ZlVm4vT00vTDNWdE12NlM1NG1EUWFrazBZTmx5czJXMWRkckprdDVMbDYrR0tOa2dxWmdWbWIvU1dXT3BBakRnZ25YWjZ4ak9zemZBdWt1SlpPTm9PUitLcHU3QVBodzhCZTB5ckJuQzJUa3p4dk1RSGpIb3JBNGhDdFMrMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0945c236-6806-41dc-b3e3-8f62995b5", "record_id": "flaws_cloudtrail:0000121:0945c236-6806-41dc-b3e3-8f62995b5", "row_index": 121, "timestamp": "2019-05-15T10:11:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0945c236-6806-41dc-b3e3-8f62995b5", "eventTime": "2019-05-15T10:11:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMbW1Fd2wwWGk5Tzk2MlZsbzZXMlN4ZldDWTh1WW1zVTB6QUhKZHZOeHQ1dnFuWEFmVkNZVXlKblE5MktadEdlR1h0UGpGbXlZMXpQOWZkNmF1OSs5WnIyVUhlb05mUlh2YW9VTy9oNEdCY3laRmNyMHFsNVRPeFFYSDRFZmRXMGlybWhzL0dtajhWWFZ4aFFRZDF4ZWVtdHpLcUpveW83N0M5dkxaVlh1UDJkZDREdWJ3eVFXVndGbzQ4TU1EeDc3VlFNOVMxbEF0RzV4aW9IbnMxZmlSSFh2aWhtV3BvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0945c236-6806-41dc-b3e3-8f62995b5", "record_id": "flaws_cloudtrail:0000122:0945c236-6806-41dc-b3e3-8f62995b5", "row_index": 122, "timestamp": "2019-05-15T10:11:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0945c236-6806-41dc-b3e3-8f62995b5", "eventTime": "2019-05-15T10:11:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMbW1Fd2wwWGk5Tzk2MlZsbzZXMlN4ZldDWTh1WW1zVTB6QUhKZHZOeHQ1dnFuWEFmVkNZVXlKblE5MktadEdlR1h0UGpGbXlZMXpQOWZkNmF1OSs5WnIyVUhlb05mUlh2YW9VTy9oNEdCY3laRmNyMHFsNVRPeFFYSDRFZmRXMGlybWhzL0dtajhWWFZ4aFFRZDF4ZWVtdHpLcUpveW83N0M5dkxaVlh1UDJkZDREdWJ3eVFXVndGbzQ4TU1EeDc3VlFNOVMxbEF0RzV4aW9IbnMxZmlSSFh2aWhtV3BvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e05a0b-e08d-4aa3-b790-b37d7c32a16f", "record_id": "flaws_cloudtrail:0000123:48e05a0b-e08d-4aa3-b790-b37d7c32a16f", "row_index": 123, "timestamp": "2019-05-15T10:11:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e05a0b-e08d-4aa3-b790-b37d7c32a16f", "eventTime": "2019-05-15T10:11:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmT3BLUlNBZUNsdzJWdWMwdjZrcG84NE9XMUN0d0JXRmJNdmdFRGRYclVsRXVUUklDRjVHamhVNHhFVlV5OHFYZDN0RTg5WnZid0M3UDlkSW5XbHZQbmhZMXl1MTltUXBXOGJ0SFNRUFF4YjlhRnNsRzZWWS9BN0Y0TXdGdWs5OTk5aGoxeTJjWUZOOXhOMm81alhyOHRmaGV0VTlpTzYzTkFOdlZrVzI1VmpLa0RLbVhDd21KOUFic3NLVThJYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11a77ade-d2e9-49bc-a54f-25fb74283418", "record_id": "flaws_cloudtrail:0000124:11a77ade-d2e9-49bc-a54f-25fb74283418", "row_index": 124, "timestamp": "2019-05-15T10:11:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11a77ade-d2e9-49bc-a54f-25fb74283418", "eventTime": "2019-05-15T10:11:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCcERDMFlMSTN0cGpmRWRVeFlTNWVNRHEyaGVSRStPMGR4UUZGUnoxWlFIanNTY3piOUZ0dFAxak9ob0NUME9IYnJzclJwemQvNUlORjdqclBseE9SUkhQbDBrUmVLQ0dNUE5RMUJvaVRMajJWcHJocW1ENGk5MWdXSGNXTzBLZUZPbUFNU3Z0QjlBZGZ4VEx0djVjUDFCQU9mc0o0K2VMdmxpSHBGMWM3SlV5N01zQWtLcFFSQkZtalNXbUdvK0xMVEU4RmxNSjk5bnNhbVdMWlJ1alNjbXc2UEw5VU1BPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e05a0b-e08d-4aa3-b790-b37d7c32a16f", "record_id": "flaws_cloudtrail:0000125:48e05a0b-e08d-4aa3-b790-b37d7c32a16f", "row_index": 125, "timestamp": "2019-05-15T10:11:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e05a0b-e08d-4aa3-b790-b37d7c32a16f", "eventTime": "2019-05-15T10:11:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmT3BLUlNBZUNsdzJWdWMwdjZrcG84NE9XMUN0d0JXRmJNdmdFRGRYclVsRXVUUklDRjVHamhVNHhFVlV5OHFYZDN0RTg5WnZid0M3UDlkSW5XbHZQbmhZMXl1MTltUXBXOGJ0SFNRUFF4YjlhRnNsRzZWWS9BN0Y0TXdGdWs5OTk5aGoxeTJjWUZOOXhOMm81alhyOHRmaGV0VTlpTzYzTkFOdlZrVzI1VmpLa0RLbVhDd21KOUFic3NLVThJYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11a77ade-d2e9-49bc-a54f-25fb74283418", "record_id": "flaws_cloudtrail:0000126:11a77ade-d2e9-49bc-a54f-25fb74283418", "row_index": 126, "timestamp": "2019-05-15T10:11:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11a77ade-d2e9-49bc-a54f-25fb74283418", "eventTime": "2019-05-15T10:11:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCcERDMFlMSTN0cGpmRWRVeFlTNWVNRHEyaGVSRStPMGR4UUZGUnoxWlFIanNTY3piOUZ0dFAxak9ob0NUME9IYnJzclJwemQvNUlORjdqclBseE9SUkhQbDBrUmVLQ0dNUE5RMUJvaVRMajJWcHJocW1ENGk5MWdXSGNXTzBLZUZPbUFNU3Z0QjlBZGZ4VEx0djVjUDFCQU9mc0o0K2VMdmxpSHBGMWM3SlV5N01zQWtLcFFSQkZtalNXbUdvK0xMVEU4RmxNSjk5bnNhbVdMWlJ1alNjbXc2UEw5VU1BPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a7dffd-fa9f-48d9-9c66-c11a16679c38", "record_id": "flaws_cloudtrail:0000127:d8a7dffd-fa9f-48d9-9c66-c11a16679c38", "row_index": 127, "timestamp": "2019-05-15T10:11:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a7dffd-fa9f-48d9-9c66-c11a16679c38", "eventTime": "2019-05-15T10:11:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHa0F6NzF1RHZmbXp3SHI3YTlteGJLWVJ6VWltdVUyZkVZSnlTKzJCMVJxMkdiMi8zclZUeEdmZG9nbjBLMWtqeWFma1c5cGJ3TFpvMGhCRFRXaEltNWh0UjZSeUZzc1BIUjJSb1YwT0gyWC82K3V3azZvbUdPSkhMRVoyK3N1cExNSE5lTGNOM296aVE4V2tIckpTd0lYOGo4Q3duWEt1SFM5NGF3TmVSVGlKZ2NUNXZ1enJPQkYxQXZzNWZnZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a7dffd-fa9f-48d9-9c66-c11a16679c38", "record_id": "flaws_cloudtrail:0000128:d8a7dffd-fa9f-48d9-9c66-c11a16679c38", "row_index": 128, "timestamp": "2019-05-15T10:11:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a7dffd-fa9f-48d9-9c66-c11a16679c38", "eventTime": "2019-05-15T10:11:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHa0F6NzF1RHZmbXp3SHI3YTlteGJLWVJ6VWltdVUyZkVZSnlTKzJCMVJxMkdiMi8zclZUeEdmZG9nbjBLMWtqeWFma1c5cGJ3TFpvMGhCRFRXaEltNWh0UjZSeUZzc1BIUjJSb1YwT0gyWC82K3V3azZvbUdPSkhMRVoyK3N1cExNSE5lTGNOM296aVE4V2tIckpTd0lYOGo4Q3duWEt1SFM5NGF3TmVSVGlKZ2NUNXZ1enJPQkYxQXZzNWZnZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fc22493-fd60-451d-baa2-9f9d16cc224a", "record_id": "flaws_cloudtrail:0000129:9fc22493-fd60-451d-baa2-9f9d16cc224a", "row_index": 129, "timestamp": "2019-05-15T10:12:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fc22493-fd60-451d-baa2-9f9d16cc224a", "eventTime": "2019-05-15T10:12:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fc22493-fd60-451d-baa2-9f9d16cc224a", "record_id": "flaws_cloudtrail:0000130:9fc22493-fd60-451d-baa2-9f9d16cc224a", "row_index": 130, "timestamp": "2019-05-15T10:12:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fc22493-fd60-451d-baa2-9f9d16cc224a", "eventTime": "2019-05-15T10:12:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011ee21d-fa9f-4c5c-b2b8-85a6166bf704", "record_id": "flaws_cloudtrail:0000131:011ee21d-fa9f-4c5c-b2b8-85a6166bf704", "row_index": 131, "timestamp": "2019-05-15T10:14:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011ee21d-fa9f-4c5c-b2b8-85a6166bf704", "eventTime": "2019-05-15T10:14:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011ee21d-fa9f-4c5c-b2b8-85a6166bf704", "record_id": "flaws_cloudtrail:0000132:011ee21d-fa9f-4c5c-b2b8-85a6166bf704", "row_index": 132, "timestamp": "2019-05-15T10:14:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011ee21d-fa9f-4c5c-b2b8-85a6166bf704", "eventTime": "2019-05-15T10:14:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4e23b61-d5a6-4c14-954c-8722c1da9697", "record_id": "flaws_cloudtrail:0000133:c4e23b61-d5a6-4c14-954c-8722c1da9697", "row_index": 133, "timestamp": "2019-05-15T10:23:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4e23b61-d5a6-4c14-954c-8722c1da9697", "eventTime": "2019-05-15T10:23:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4e23b61-d5a6-4c14-954c-8722c1da9697", "record_id": "flaws_cloudtrail:0000134:c4e23b61-d5a6-4c14-954c-8722c1da9697", "row_index": 134, "timestamp": "2019-05-15T10:23:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4e23b61-d5a6-4c14-954c-8722c1da9697", "eventTime": "2019-05-15T10:23:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e01f446e-ca60-4ee1-874b-fe406b68c070", "record_id": "flaws_cloudtrail:0000135:e01f446e-ca60-4ee1-874b-fe406b68c070", "row_index": 135, "timestamp": "2019-05-15T10:23:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e01f446e-ca60-4ee1-874b-fe406b68c070", "eventTime": "2019-05-15T10:23:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e01f446e-ca60-4ee1-874b-fe406b68c070", "record_id": "flaws_cloudtrail:0000136:e01f446e-ca60-4ee1-874b-fe406b68c070", "row_index": 136, "timestamp": "2019-05-15T10:23:34Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e01f446e-ca60-4ee1-874b-fe406b68c070", "eventTime": "2019-05-15T10:23:34Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd88c62f-76c1-4d94-ba11-eed64369fd13", "record_id": "flaws_cloudtrail:0000137:dd88c62f-76c1-4d94-ba11-eed64369fd13", "row_index": 137, "timestamp": "2019-05-15T10:23:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd88c62f-76c1-4d94-ba11-eed64369fd13", "eventTime": "2019-05-15T10:23:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd88c62f-76c1-4d94-ba11-eed64369fd13", "record_id": "flaws_cloudtrail:0000138:dd88c62f-76c1-4d94-ba11-eed64369fd13", "row_index": 138, "timestamp": "2019-05-15T10:23:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd88c62f-76c1-4d94-ba11-eed64369fd13", "eventTime": "2019-05-15T10:23:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed88cfa-59d4-437e-b727-21a813c78171", "record_id": "flaws_cloudtrail:0000139:1ed88cfa-59d4-437e-b727-21a813c78171", "row_index": 139, "timestamp": "2019-05-15T10:36:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQYAUASTHLULXMO3H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.95.37.69", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed88cfa-59d4-437e-b727-21a813c78171", "eventTime": "2019-05-15T10:36:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.95.37.69", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQYAUASTHLULXMO3H", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7262616-a59b-4af0-851a-0ef1fd0021d0", "record_id": "flaws_cloudtrail:0000140:a7262616-a59b-4af0-851a-0ef1fd0021d0", "row_index": 140, "timestamp": "2019-05-15T10:38:24Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQYAUASTHLULXMO3H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.95.37.69", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7262616-a59b-4af0-851a-0ef1fd0021d0", "eventTime": "2019-05-15T10:38:24Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.95.37.69", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQYAUASTHLULXMO3H", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76efdb1e-cd1c-4dd9-ac86-076e35fbfae0", "record_id": "flaws_cloudtrail:0000141:76efdb1e-cd1c-4dd9-ac86-076e35fbfae0", "row_index": 141, "timestamp": "2019-05-15T10:40:48Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQYAUASTHLULXMO3H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.95.37.69", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 552, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76efdb1e-cd1c-4dd9-ac86-076e35fbfae0", "eventTime": "2019-05-15T10:40:48Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.95.37.69", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQYAUASTHLULXMO3H", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a1b8d28-0fd8-4946-bd45-205a91b7d2c6", "record_id": "flaws_cloudtrail:0000142:8a1b8d28-0fd8-4946-bd45-205a91b7d2c6", "row_index": 142, "timestamp": "2019-05-15T10:43:03Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQYAUASTHLULXMO3H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.95.37.69", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-438"], "raw_record_size_bytes": 626, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a1b8d28-0fd8-4946-bd45-205a91b7d2c6", "eventTime": "2019-05-15T10:43:03Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.95.37.69", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQYAUASTHLULXMO3H", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-438"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-438"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c9d2fea-f01b-49f5-b450-9e37fcd29da0", "record_id": "flaws_cloudtrail:0000143:9c9d2fea-f01b-49f5-b450-9e37fcd29da0", "row_index": 143, "timestamp": "2019-05-15T10:43:40Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQYAUASTHLULXMO3H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.95.37.69", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-438"], "raw_record_size_bytes": 631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c9d2fea-f01b-49f5-b450-9e37fcd29da0", "eventTime": "2019-05-15T10:43:40Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.95.37.69", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQYAUASTHLULXMO3H", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-438"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-438"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bad309cc-a382-4975-a84b-37c56a433fa4", "record_id": "flaws_cloudtrail:0000144:bad309cc-a382-4975-a84b-37c56a433fa4", "row_index": 144, "timestamp": "2019-05-15T10:44:20Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAQYAUASTHLULXMO3H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.95.37.69", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-438", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bad309cc-a382-4975-a84b-37c56a433fa4", "eventTime": "2019-05-15T10:44:20Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.95.37.69", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAQYAUASTHLULXMO3H", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-438", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-438"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b1ac96-6df7-4ad9-bac6-0e7c268fe3d8", "record_id": "flaws_cloudtrail:0000145:d7b1ac96-6df7-4ad9-bac6-0e7c268fe3d8", "row_index": 145, "timestamp": "2019-05-15T10:47:23Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAME0K9YP0L5VLTI5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1221, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b1ac96-6df7-4ad9-bac6-0e7c268fe3d8", "eventTime": "2019-05-15T10:47:23Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAME0K9YP0L5VLTI5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:34:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b1ac96-6df7-4ad9-bac6-0e7c268fe3d8", "record_id": "flaws_cloudtrail:0000146:d7b1ac96-6df7-4ad9-bac6-0e7c268fe3d8", "row_index": 146, "timestamp": "2019-05-15T10:47:23Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAME0K9YP0L5VLTI5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1221, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b1ac96-6df7-4ad9-bac6-0e7c268fe3d8", "eventTime": "2019-05-15T10:47:23Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAME0K9YP0L5VLTI5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:34:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ded4777-834f-47af-bb7c-5df2923ee9bb", "record_id": "flaws_cloudtrail:0000147:5ded4777-834f-47af-bb7c-5df2923ee9bb", "row_index": 147, "timestamp": "2019-05-15T10:48:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAME0K9YP0L5VLTI5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ded4777-834f-47af-bb7c-5df2923ee9bb", "eventTime": "2019-05-15T10:48:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAME0K9YP0L5VLTI5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:34:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ded4777-834f-47af-bb7c-5df2923ee9bb", "record_id": "flaws_cloudtrail:0000148:5ded4777-834f-47af-bb7c-5df2923ee9bb", "row_index": 148, "timestamp": "2019-05-15T10:48:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAME0K9YP0L5VLTI5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ded4777-834f-47af-bb7c-5df2923ee9bb", "eventTime": "2019-05-15T10:48:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAME0K9YP0L5VLTI5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:34:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e87f24-3e5b-484e-82c6-5b7deb25521", "record_id": "flaws_cloudtrail:0000149:24e87f24-3e5b-484e-82c6-5b7deb25521", "row_index": 149, "timestamp": "2019-05-15T10:49:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e87f24-3e5b-484e-82c6-5b7deb25521", "eventTime": "2019-05-15T10:49:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e87f24-3e5b-484e-82c6-5b7deb25521", "record_id": "flaws_cloudtrail:0000150:24e87f24-3e5b-484e-82c6-5b7deb25521", "row_index": 150, "timestamp": "2019-05-15T10:49:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e87f24-3e5b-484e-82c6-5b7deb25521", "eventTime": "2019-05-15T10:49:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7184b201-2355-4bf7-a278-2cb79f73c7a8", "record_id": "flaws_cloudtrail:0000151:7184b201-2355-4bf7-a278-2cb79f73c7a8", "row_index": 151, "timestamp": "2019-05-15T10:49:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7184b201-2355-4bf7-a278-2cb79f73c7a8", "eventTime": "2019-05-15T10:49:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7184b201-2355-4bf7-a278-2cb79f73c7a8", "record_id": "flaws_cloudtrail:0000152:7184b201-2355-4bf7-a278-2cb79f73c7a8", "row_index": 152, "timestamp": "2019-05-15T10:49:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7184b201-2355-4bf7-a278-2cb79f73c7a8", "eventTime": "2019-05-15T10:49:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5da30d68-fa46-41bc-b434-854e2a5d4619", "record_id": "flaws_cloudtrail:0000153:5da30d68-fa46-41bc-b434-854e2a5d4619", "row_index": 153, "timestamp": "2019-05-15T10:52:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAME0K9YP0L5VLTI5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5da30d68-fa46-41bc-b434-854e2a5d4619", "eventTime": "2019-05-15T10:52:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAME0K9YP0L5VLTI5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:34:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5da30d68-fa46-41bc-b434-854e2a5d4619", "record_id": "flaws_cloudtrail:0000154:5da30d68-fa46-41bc-b434-854e2a5d4619", "row_index": 154, "timestamp": "2019-05-15T10:52:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAME0K9YP0L5VLTI5N", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5da30d68-fa46-41bc-b434-854e2a5d4619", "eventTime": "2019-05-15T10:52:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.145 Python/2.7.10 Darwin/18.2.0 botocore/1.12.135", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAME0K9YP0L5VLTI5N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:34:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4bb9ea-740d-4b77-a9be-d2faaca7c3c7", "record_id": "flaws_cloudtrail:0000155:5c4bb9ea-740d-4b77-a9be-d2faaca7c3c7", "row_index": 155, "timestamp": "2019-05-15T10:55:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4bb9ea-740d-4b77-a9be-d2faaca7c3c7", "eventTime": "2019-05-15T10:55:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4bb9ea-740d-4b77-a9be-d2faaca7c3c7", "record_id": "flaws_cloudtrail:0000156:5c4bb9ea-740d-4b77-a9be-d2faaca7c3c7", "row_index": 156, "timestamp": "2019-05-15T10:55:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4bb9ea-740d-4b77-a9be-d2faaca7c3c7", "eventTime": "2019-05-15T10:55:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20ee7e0-d3fd-44b5-af06-0b7ff96966", "record_id": "flaws_cloudtrail:0000157:d20ee7e0-d3fd-44b5-af06-0b7ff96966", "row_index": 157, "timestamp": "2019-05-15T10:57:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20ee7e0-d3fd-44b5-af06-0b7ff96966", "eventTime": "2019-05-15T10:57:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20ee7e0-d3fd-44b5-af06-0b7ff96966", "record_id": "flaws_cloudtrail:0000158:d20ee7e0-d3fd-44b5-af06-0b7ff96966", "row_index": 158, "timestamp": "2019-05-15T10:57:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20ee7e0-d3fd-44b5-af06-0b7ff96966", "eventTime": "2019-05-15T10:57:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d38ce0-546d-41e1-aa14-00100a5f0db", "record_id": "flaws_cloudtrail:0000159:e3d38ce0-546d-41e1-aa14-00100a5f0db", "row_index": 159, "timestamp": "2019-05-15T10:58:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d38ce0-546d-41e1-aa14-00100a5f0db", "eventTime": "2019-05-15T10:58:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d38ce0-546d-41e1-aa14-00100a5f0db", "record_id": "flaws_cloudtrail:0000160:e3d38ce0-546d-41e1-aa14-00100a5f0db", "row_index": 160, "timestamp": "2019-05-15T10:58:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d38ce0-546d-41e1-aa14-00100a5f0db", "eventTime": "2019-05-15T10:58:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b6a092f-253d-4bfc-9243-dd3e529de256", "record_id": "flaws_cloudtrail:0000161:2b6a092f-253d-4bfc-9243-dd3e529de256", "row_index": 161, "timestamp": "2019-05-15T10:59:40Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b6a092f-253d-4bfc-9243-dd3e529de256", "eventTime": "2019-05-15T10:59:40Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b6a092f-253d-4bfc-9243-dd3e529de256", "record_id": "flaws_cloudtrail:0000162:2b6a092f-253d-4bfc-9243-dd3e529de256", "row_index": 162, "timestamp": "2019-05-15T10:59:40Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b6a092f-253d-4bfc-9243-dd3e529de256", "eventTime": "2019-05-15T10:59:40Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92fb687d-e049-43ed-a5af-2d3287804700", "record_id": "flaws_cloudtrail:0000163:92fb687d-e049-43ed-a5af-2d3287804700", "row_index": 163, "timestamp": "2019-05-15T11:01:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92fb687d-e049-43ed-a5af-2d3287804700", "eventTime": "2019-05-15T11:01:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKJ13X5PMLFBPMOXJ", "expiration": "May 15, 2019 5:32:20 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92fb687d-e049-43ed-a5af-2d3287804700", "record_id": "flaws_cloudtrail:0000164:92fb687d-e049-43ed-a5af-2d3287804700", "row_index": 164, "timestamp": "2019-05-15T11:01:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92fb687d-e049-43ed-a5af-2d3287804700", "eventTime": "2019-05-15T11:01:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKJ13X5PMLFBPMOXJ", "expiration": "May 15, 2019 5:32:20 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bde6cb-55df-481d-994d-fae44f7afc6c", "record_id": "flaws_cloudtrail:0000165:53bde6cb-55df-481d-994d-fae44f7afc6c", "row_index": 165, "timestamp": "2019-05-15T11:02:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bde6cb-55df-481d-994d-fae44f7afc6c", "eventTime": "2019-05-15T11:02:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bde6cb-55df-481d-994d-fae44f7afc6c", "record_id": "flaws_cloudtrail:0000166:53bde6cb-55df-481d-994d-fae44f7afc6c", "row_index": 166, "timestamp": "2019-05-15T11:02:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bde6cb-55df-481d-994d-fae44f7afc6c", "eventTime": "2019-05-15T11:02:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73863fd6-c507-482a-8df8-7fbbe42e0f25", "record_id": "flaws_cloudtrail:0000167:73863fd6-c507-482a-8df8-7fbbe42e0f25", "row_index": 167, "timestamp": "2019-05-15T11:02:47Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73863fd6-c507-482a-8df8-7fbbe42e0f25", "eventTime": "2019-05-15T11:02:47Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73863fd6-c507-482a-8df8-7fbbe42e0f25", "record_id": "flaws_cloudtrail:0000168:73863fd6-c507-482a-8df8-7fbbe42e0f25", "row_index": 168, "timestamp": "2019-05-15T11:02:47Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73863fd6-c507-482a-8df8-7fbbe42e0f25", "eventTime": "2019-05-15T11:02:47Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78b12a5-d444-4b81-b848-f35e1b938122", "record_id": "flaws_cloudtrail:0000169:f78b12a5-d444-4b81-b848-f35e1b938122", "row_index": 169, "timestamp": "2019-05-15T11:02:55Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78b12a5-d444-4b81-b848-f35e1b938122", "eventTime": "2019-05-15T11:02:55Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78b12a5-d444-4b81-b848-f35e1b938122", "record_id": "flaws_cloudtrail:0000170:f78b12a5-d444-4b81-b848-f35e1b938122", "row_index": 170, "timestamp": "2019-05-15T11:02:55Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78b12a5-d444-4b81-b848-f35e1b938122", "eventTime": "2019-05-15T11:02:55Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40f09831-cac5-4988-9ac1-2e292af9fa50", "record_id": "flaws_cloudtrail:0000171:40f09831-cac5-4988-9ac1-2e292af9fa50", "row_index": 171, "timestamp": "2019-05-15T11:03:10Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40f09831-cac5-4988-9ac1-2e292af9fa50", "eventTime": "2019-05-15T11:03:10Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40f09831-cac5-4988-9ac1-2e292af9fa50", "record_id": "flaws_cloudtrail:0000172:40f09831-cac5-4988-9ac1-2e292af9fa50", "row_index": 172, "timestamp": "2019-05-15T11:03:10Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40f09831-cac5-4988-9ac1-2e292af9fa50", "eventTime": "2019-05-15T11:03:10Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b054588-9001-4a16-8b7a-cf6fb3b41be9", "record_id": "flaws_cloudtrail:0000173:b054588-9001-4a16-8b7a-cf6fb3b41be9", "row_index": 173, "timestamp": "2019-05-15T11:03:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b054588-9001-4a16-8b7a-cf6fb3b41be9", "eventTime": "2019-05-15T11:03:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b054588-9001-4a16-8b7a-cf6fb3b41be9", "record_id": "flaws_cloudtrail:0000174:b054588-9001-4a16-8b7a-cf6fb3b41be9", "row_index": 174, "timestamp": "2019-05-15T11:03:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b054588-9001-4a16-8b7a-cf6fb3b41be9", "eventTime": "2019-05-15T11:03:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e93ea48-53aa-495b-911c-5d91a795ab10", "record_id": "flaws_cloudtrail:0000175:4e93ea48-53aa-495b-911c-5d91a795ab10", "row_index": 175, "timestamp": "2019-05-15T11:03:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e93ea48-53aa-495b-911c-5d91a795ab10", "eventTime": "2019-05-15T11:03:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmcXY4cUdBSmw0MWFqa1RmeXFRUXVpa2RNblo2U05XY0EwYmZCUHpWZHdLOG1QYnRXMXI1ZU5hV2VuYVpNQ1QzaVJmLzBtVDlkQTlIb0ROcUhSNEFLSm1xSEUyS1BRSmxaMHZERDdTb3ZsVWpBajRJVXRDeWlnYzBnT2t1L1RKdWFhaWdiY2piNUg5Qzgyd0VRZHJtWnVFWTdqTlU5NFk3WkNKR0IxR1FNR21oUGNHay9KdkFEdmpONzdZVGkzT1VBQmdlSXNrdlNoZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e93ea48-53aa-495b-911c-5d91a795ab10", "record_id": "flaws_cloudtrail:0000176:4e93ea48-53aa-495b-911c-5d91a795ab10", "row_index": 176, "timestamp": "2019-05-15T11:03:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e93ea48-53aa-495b-911c-5d91a795ab10", "eventTime": "2019-05-15T11:03:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmcXY4cUdBSmw0MWFqa1RmeXFRUXVpa2RNblo2U05XY0EwYmZCUHpWZHdLOG1QYnRXMXI1ZU5hV2VuYVpNQ1QzaVJmLzBtVDlkQTlIb0ROcUhSNEFLSm1xSEUyS1BRSmxaMHZERDdTb3ZsVWpBajRJVXRDeWlnYzBnT2t1L1RKdWFhaWdiY2piNUg5Qzgyd0VRZHJtWnVFWTdqTlU5NFk3WkNKR0IxR1FNR21oUGNHay9KdkFEdmpONzdZVGkzT1VBQmdlSXNrdlNoZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142946b62-402e-4933-83f7-d19b4a759889a", "record_id": "flaws_cloudtrail:0000177:142946b62-402e-4933-83f7-d19b4a759889a", "row_index": 177, "timestamp": "2019-05-15T11:03:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142946b62-402e-4933-83f7-d19b4a759889a", "eventTime": "2019-05-15T11:03:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQWFlNVkFQNno2OGIydnNmTTQ5ZEhySmx6S3dBWmdwRENJZnFqZ1V6MXowdmhHRjl5aDZjeWxiVTNEYVhKUk5nRzI3TEFCUmR1ekN4RVdyZzF5Z1R5MWJ1UHZZSnQzQy96RG1jWW9hUVZVZ0x4c1RzcEtCeUpsK1VuVlFXK2tFNUpoUmEzTmUxVWVQVG56VjZlZTZiNUNZSnNZbFgxU0dWNUFGd25PWndBUzZtT0diUCs5RU1wN2lzRVJYYVBLMzl2OUFyQTZSMmpXWndFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142946b62-402e-4933-83f7-d19b4a759889a", "record_id": "flaws_cloudtrail:0000178:142946b62-402e-4933-83f7-d19b4a759889a", "row_index": 178, "timestamp": "2019-05-15T11:03:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142946b62-402e-4933-83f7-d19b4a759889a", "eventTime": "2019-05-15T11:03:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQWFlNVkFQNno2OGIydnNmTTQ5ZEhySmx6S3dBWmdwRENJZnFqZ1V6MXowdmhHRjl5aDZjeWxiVTNEYVhKUk5nRzI3TEFCUmR1ekN4RVdyZzF5Z1R5MWJ1UHZZSnQzQy96RG1jWW9hUVZVZ0x4c1RzcEtCeUpsK1VuVlFXK2tFNUpoUmEzTmUxVWVQVG56VjZlZTZiNUNZSnNZbFgxU0dWNUFGd25PWndBUzZtT0diUCs5RU1wN2lzRVJYYVBLMzl2OUFyQTZSMmpXWndFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7b1ae8-ffdb-4ce2-a7e2-f0837acd6f25", "record_id": "flaws_cloudtrail:0000179:8a7b1ae8-ffdb-4ce2-a7e2-f0837acd6f25", "row_index": 179, "timestamp": "2019-05-15T11:03:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7b1ae8-ffdb-4ce2-a7e2-f0837acd6f25", "eventTime": "2019-05-15T11:03:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTm5BT1NFK29pQm9PZThQK2Q0MHpJTEFyS0JEaHBSS2MvRmtOWEN0anBtZWU4QkkxTG9CLzdyK0hFdDBqay8rYXhnWVpoMGltUWFXc1ZGZ1VIMUh6LzdOaDdFYTdJY0FWallrOXBJcXRGVzArdmJmR3FKMEVvVkRWalFpVFVubVA3WkNPY0VUUzEyUmlWbDZoYm1vbE1QaG1FWjJmYndKcm8veVh2N0dWOVN0WGNxV3cweStRcVdzQzluSVhZQ1p0SW8zQnZ3Ly85OTFWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7b1ae8-ffdb-4ce2-a7e2-f0837acd6f25", "record_id": "flaws_cloudtrail:0000180:8a7b1ae8-ffdb-4ce2-a7e2-f0837acd6f25", "row_index": 180, "timestamp": "2019-05-15T11:03:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7b1ae8-ffdb-4ce2-a7e2-f0837acd6f25", "eventTime": "2019-05-15T11:03:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsTm5BT1NFK29pQm9PZThQK2Q0MHpJTEFyS0JEaHBSS2MvRmtOWEN0anBtZWU4QkkxTG9CLzdyK0hFdDBqay8rYXhnWVpoMGltUWFXc1ZGZ1VIMUh6LzdOaDdFYTdJY0FWallrOXBJcXRGVzArdmJmR3FKMEVvVkRWalFpVFVubVA3WkNPY0VUUzEyUmlWbDZoYm1vbE1QaG1FWjJmYndKcm8veVh2N0dWOVN0WGNxV3cweStRcVdzQzluSVhZQ1p0SW8zQnZ3Ly85OTFWUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d1a2447-4eb1-48c4-ae7e-1fd5b03feb24", "record_id": "flaws_cloudtrail:0000181:6d1a2447-4eb1-48c4-ae7e-1fd5b03feb24", "row_index": 181, "timestamp": "2019-05-15T11:03:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d1a2447-4eb1-48c4-ae7e-1fd5b03feb24", "eventTime": "2019-05-15T11:03:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4WU9lVjJDbzIrMnFHUi8vVmEzdEwrSUdvTDh4djhQZDRGbStobEY4UzA2YTRWSGpwSEUxenNxbWFpRmRlMVRuMkk3TjI5R2Zkd3RJVWVZMTB6MmZsMldSdE1vK1ZXYi9xQ0FzWmJrRFF4b2l2Zkp6TG13M08zSEFKUXRpSTBGRHh5MXJZK2s3ek5DU01IanZQNGE4UUIvWkEzSERkMjRvSmhzdjRISzRqdzJlSjlFYS9uVmEvdCsrM0MzcDhaTmFmSFM4RGdKcyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d1a2447-4eb1-48c4-ae7e-1fd5b03feb24", "record_id": "flaws_cloudtrail:0000182:6d1a2447-4eb1-48c4-ae7e-1fd5b03feb24", "row_index": 182, "timestamp": "2019-05-15T11:03:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d1a2447-4eb1-48c4-ae7e-1fd5b03feb24", "eventTime": "2019-05-15T11:03:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4WU9lVjJDbzIrMnFHUi8vVmEzdEwrSUdvTDh4djhQZDRGbStobEY4UzA2YTRWSGpwSEUxenNxbWFpRmRlMVRuMkk3TjI5R2Zkd3RJVWVZMTB6MmZsMldSdE1vK1ZXYi9xQ0FzWmJrRFF4b2l2Zkp6TG13M08zSEFKUXRpSTBGRHh5MXJZK2s3ek5DU01IanZQNGE4UUIvWkEzSERkMjRvSmhzdjRISzRqdzJlSjlFYS9uVmEvdCsrM0MzcDhaTmFmSFM4RGdKcyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbc7541d-d85f-4b63-98c6-a585db986fe6", "record_id": "flaws_cloudtrail:0000183:cbc7541d-d85f-4b63-98c6-a585db986fe6", "row_index": 183, "timestamp": "2019-05-15T11:03:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbc7541d-d85f-4b63-98c6-a585db986fe6", "eventTime": "2019-05-15T11:03:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUG0xL3BucjhRM0Q0NjlPL3YxR3RjRTFGQXRTU09pNmtKRTV1RllBeXlIeFlyWmVxTHZYNzkzcnljN1NubTRENVYrUHdPZlpnVlYwMzJoNzU1dC82RkdSN1NZOU9jMEFjREN1R3hQa0Q4cmNpejhyZzYydWtDSUJ3MEUyWXpDQ3Q5QWVSMlN1NXhqRUJUbDIwOFc3NUNsVkxFZGlBSExWaGthSWVZdTNNN2ozMVdXdzg0aFZ0YzI1aCtXbTJSNFh4VXVtZUJyMm93TXFpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbc7541d-d85f-4b63-98c6-a585db986fe6", "record_id": "flaws_cloudtrail:0000184:cbc7541d-d85f-4b63-98c6-a585db986fe6", "row_index": 184, "timestamp": "2019-05-15T11:03:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbc7541d-d85f-4b63-98c6-a585db986fe6", "eventTime": "2019-05-15T11:03:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwUG0xL3BucjhRM0Q0NjlPL3YxR3RjRTFGQXRTU09pNmtKRTV1RllBeXlIeFlyWmVxTHZYNzkzcnljN1NubTRENVYrUHdPZlpnVlYwMzJoNzU1dC82RkdSN1NZOU9jMEFjREN1R3hQa0Q4cmNpejhyZzYydWtDSUJ3MEUyWXpDQ3Q5QWVSMlN1NXhqRUJUbDIwOFc3NUNsVkxFZGlBSExWaGthSWVZdTNNN2ozMVdXdzg0aFZ0YzI1aCtXbTJSNFh4VXVtZUJyMm93TXFpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "299387d9-16ae-442d-aca6-9eec815c9772", "record_id": "flaws_cloudtrail:0000185:299387d9-16ae-442d-aca6-9eec815c9772", "row_index": 185, "timestamp": "2019-05-15T11:03:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "299387d9-16ae-442d-aca6-9eec815c9772", "eventTime": "2019-05-15T11:03:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxdkRoeTJaWmpoT2tacTJjZ2VjU0N4UTJOSDBJc3NZc2k4RTNDRko5VTNLZDFadjk1d21VRTRrWVRpNXVCaG90YXBXSlIxR3lMSHhBVDk2UUhVbnFHcGlGaDNiR0FlUnFPdnpZeTcrZzdkTVVLTEhZelJPaG9odDRjb3lFQiszWEU0QkRNVk9uNHh6YVZKR1VMa3dpRVk4aEVTWkxuUlhvN20wTldnVWw5Z2FncElqVXRTTmdObDRQdjNDKzZaUEN5cWRkWnZkV3B4VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "299387d9-16ae-442d-aca6-9eec815c9772", "record_id": "flaws_cloudtrail:0000186:299387d9-16ae-442d-aca6-9eec815c9772", "row_index": 186, "timestamp": "2019-05-15T11:03:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "299387d9-16ae-442d-aca6-9eec815c9772", "eventTime": "2019-05-15T11:03:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxdkRoeTJaWmpoT2tacTJjZ2VjU0N4UTJOSDBJc3NZc2k4RTNDRko5VTNLZDFadjk1d21VRTRrWVRpNXVCaG90YXBXSlIxR3lMSHhBVDk2UUhVbnFHcGlGaDNiR0FlUnFPdnpZeTcrZzdkTVVLTEhZelJPaG9odDRjb3lFQiszWEU0QkRNVk9uNHh6YVZKR1VMa3dpRVk4aEVTWkxuUlhvN20wTldnVWw5Z2FncElqVXRTTmdObDRQdjNDKzZaUEN5cWRkWnZkV3B4VT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3d0403-cadf-46ad-b635-f6404b3d3f9d", "record_id": "flaws_cloudtrail:0000187:fa3d0403-cadf-46ad-b635-f6404b3d3f9d", "row_index": 187, "timestamp": "2019-05-15T11:03:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3d0403-cadf-46ad-b635-f6404b3d3f9d", "eventTime": "2019-05-15T11:03:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhc29uNFRlZjJkMUdOMVBHMkh0QVhQamlBdlk3eUtBOVhpVFNaTmxCUmUyOW8yejROMmViMzNVWmdWV0ZHc05sL3pVMVVienRQTlhxejZOYWVOMmVsWEhlQWZueEVxYTFHK05BT3MzRHNmNWpYbEhGWC9rdkQvaVRQc0pSYmQ2RXhNQnhDMTNMbzFXeWxueVVNQURGR1NTMmVDMGFqVGRXZmM2MTJuQUY1TTU1Ynk5bHFoVWpCTlE0cTBrWXVkMWk5bmxZbU5KMWd1TDR6UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3d0403-cadf-46ad-b635-f6404b3d3f9d", "record_id": "flaws_cloudtrail:0000188:fa3d0403-cadf-46ad-b635-f6404b3d3f9d", "row_index": 188, "timestamp": "2019-05-15T11:03:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3d0403-cadf-46ad-b635-f6404b3d3f9d", "eventTime": "2019-05-15T11:03:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhc29uNFRlZjJkMUdOMVBHMkh0QVhQamlBdlk3eUtBOVhpVFNaTmxCUmUyOW8yejROMmViMzNVWmdWV0ZHc05sL3pVMVVienRQTlhxejZOYWVOMmVsWEhlQWZueEVxYTFHK05BT3MzRHNmNWpYbEhGWC9rdkQvaVRQc0pSYmQ2RXhNQnhDMTNMbzFXeWxueVVNQURGR1NTMmVDMGFqVGRXZmM2MTJuQUY1TTU1Ynk5bHFoVWpCTlE0cTBrWXVkMWk5bmxZbU5KMWd1TDR6UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad9f74d-2911-49de-9daf-5d9f8908a530", "record_id": "flaws_cloudtrail:0000189:0ad9f74d-2911-49de-9daf-5d9f8908a530", "row_index": 189, "timestamp": "2019-05-15T11:03:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad9f74d-2911-49de-9daf-5d9f8908a530", "eventTime": "2019-05-15T11:03:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWYVhHeis1QnlqRVNudnN3aGFxL3RhZm9QNVdzeHJjZGtCd3R3M3Jya0pKeHV4VFF3NUtqV29tdTZPbTVVeHBpaFA2d3FYU3FScitnUDB4VUgyNTlVMzFCby9OdzE2ODk1QUxZeS9pZ213aGxpUXF5Z2QrMnVNZzRCVWtKeEJ2MXpyRnozNyt6VkUxRktEaFJnSnNGQVRjd1NoSTNkTWErYlQ5bWdXSndMVmwzUisxbytYc0o5ZlkzdzVEam9MOVBJS24yQjhTN1Vsc2xLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad9f74d-2911-49de-9daf-5d9f8908a530", "record_id": "flaws_cloudtrail:0000190:0ad9f74d-2911-49de-9daf-5d9f8908a530", "row_index": 190, "timestamp": "2019-05-15T11:03:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad9f74d-2911-49de-9daf-5d9f8908a530", "eventTime": "2019-05-15T11:03:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWYVhHeis1QnlqRVNudnN3aGFxL3RhZm9QNVdzeHJjZGtCd3R3M3Jya0pKeHV4VFF3NUtqV29tdTZPbTVVeHBpaFA2d3FYU3FScitnUDB4VUgyNTlVMzFCby9OdzE2ODk1QUxZeS9pZ213aGxpUXF5Z2QrMnVNZzRCVWtKeEJ2MXpyRnozNyt6VkUxRktEaFJnSnNGQVRjd1NoSTNkTWErYlQ5bWdXSndMVmwzUisxbytYc0o5ZlkzdzVEam9MOVBJS24yQjhTN1Vsc2xLZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e7dad88-6bdf-4e73-a4dc-77f0694b3947", "record_id": "flaws_cloudtrail:0000191:9e7dad88-6bdf-4e73-a4dc-77f0694b3947", "row_index": 191, "timestamp": "2019-05-15T11:03:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e7dad88-6bdf-4e73-a4dc-77f0694b3947", "eventTime": "2019-05-15T11:03:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzLzNKSEFXZDFLblhSSEdSSHFhTStDQi9VVmpaLzFsaVMwNDU4UGJ5WVlLZjExdjgxMGJqNjF5RDBJK2RNd2IvNE9VUWdrSzhXK3Zvb2xGWmswK0ZYUzBNeTVOcG40dmR5V3dnLzRZZHg2UGNvOElOTGhoRVJhNnBIR3daK1BUSUhtNmlMN0dURysrQlpsNktBZHdsSWtIREF6dXF0QzFmY01jZno1anByQ0IvczhaNENtVVIrekJ6dGRXL0JTVzN5OFVlNWNzRlphbGRDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e7dad88-6bdf-4e73-a4dc-77f0694b3947", "record_id": "flaws_cloudtrail:0000192:9e7dad88-6bdf-4e73-a4dc-77f0694b3947", "row_index": 192, "timestamp": "2019-05-15T11:03:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e7dad88-6bdf-4e73-a4dc-77f0694b3947", "eventTime": "2019-05-15T11:03:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzLzNKSEFXZDFLblhSSEdSSHFhTStDQi9VVmpaLzFsaVMwNDU4UGJ5WVlLZjExdjgxMGJqNjF5RDBJK2RNd2IvNE9VUWdrSzhXK3Zvb2xGWmswK0ZYUzBNeTVOcG40dmR5V3dnLzRZZHg2UGNvOElOTGhoRVJhNnBIR3daK1BUSUhtNmlMN0dURysrQlpsNktBZHdsSWtIREF6dXF0QzFmY01jZno1anByQ0IvczhaNENtVVIrekJ6dGRXL0JTVzN5OFVlNWNzRlphbGRDZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c10f896-071a-4cf4-ad2a-3741568799a3", "record_id": "flaws_cloudtrail:0000193:5c10f896-071a-4cf4-ad2a-3741568799a3", "row_index": 193, "timestamp": "2019-05-15T11:03:49Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c10f896-071a-4cf4-ad2a-3741568799a3", "eventTime": "2019-05-15T11:03:49Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313ce0cc-6370-444c-8f8d-c50d7953cff1", "record_id": "flaws_cloudtrail:0000194:313ce0cc-6370-444c-8f8d-c50d7953cff1", "row_index": 194, "timestamp": "2019-05-15T11:03:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313ce0cc-6370-444c-8f8d-c50d7953cff1", "eventTime": "2019-05-15T11:03:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxVlFVbGprR1dVL1N6cVhuMkkxSjFUcElBQ1hpVTFrZjE2c2NTbHJxRG5SOWRvekxWTkV3QmZOU2tsbllvNGJCTDRMT1JvMnFrM0NOU0lVTkZocVlqVTZ2OWpRUUl1RlZLL2ljbFpRdXZENWM3R05yMUl0V0pzcVhzZlU4d0xtbTdnYThYcTFseFhybW5ScDU0L1lpb3VBYzgva05Lek16c2IydmRkbTRsOWZZUm5QREIvMnA1RWs2RmZXV084c1haQ1lBZWwrY3NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c10f896-071a-4cf4-ad2a-3741568799a3", "record_id": "flaws_cloudtrail:0000195:5c10f896-071a-4cf4-ad2a-3741568799a3", "row_index": 195, "timestamp": "2019-05-15T11:03:49Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c10f896-071a-4cf4-ad2a-3741568799a3", "eventTime": "2019-05-15T11:03:49Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313ce0cc-6370-444c-8f8d-c50d7953cff1", "record_id": "flaws_cloudtrail:0000196:313ce0cc-6370-444c-8f8d-c50d7953cff1", "row_index": 196, "timestamp": "2019-05-15T11:03:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313ce0cc-6370-444c-8f8d-c50d7953cff1", "eventTime": "2019-05-15T11:03:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxVlFVbGprR1dVL1N6cVhuMkkxSjFUcElBQ1hpVTFrZjE2c2NTbHJxRG5SOWRvekxWTkV3QmZOU2tsbllvNGJCTDRMT1JvMnFrM0NOU0lVTkZocVlqVTZ2OWpRUUl1RlZLL2ljbFpRdXZENWM3R05yMUl0V0pzcVhzZlU4d0xtbTdnYThYcTFseFhybW5ScDU0L1lpb3VBYzgva05Lek16c2IydmRkbTRsOWZZUm5QREIvMnA1RWs2RmZXV084c1haQ1lBZWwrY3NBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dfe62bf-80b5-497a-98fc-38291afbebbb", "record_id": "flaws_cloudtrail:0000197:7dfe62bf-80b5-497a-98fc-38291afbebbb", "row_index": 197, "timestamp": "2019-05-15T11:03:50Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dfe62bf-80b5-497a-98fc-38291afbebbb", "eventTime": "2019-05-15T11:03:50Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACLdX9fnqXe8g4bRRDopAnKFO98NRciXpnNO85XWS/bI0bbPrc1hzrW4Bt9GOIzNOIv8nTOb09NiJ22Rr6fxQrGrYGcT0Gd9970VoP9ryAD3+g==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec70e098-a376-4253-9634-0a234695fb91", "record_id": "flaws_cloudtrail:0000198:ec70e098-a376-4253-9634-0a234695fb91", "row_index": 198, "timestamp": "2019-05-15T11:03:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec70e098-a376-4253-9634-0a234695fb91", "eventTime": "2019-05-15T11:03:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFakFGOEprbU5EdExhRkZwdXVGYlgrMnlZdWFzYkZ0UUdpNENPK1FVZkdkVHdPam1uajlUN29xMGZyT3c3dFVFMnBUYytWaDdLL01mdXkvM21Oc3gwVytvdWN6c21jYmdnbUZ5T3pTb1R6MWpEbU9MOFducTcrekN1cUdUbDVBc1R1bzZENkJkMHNMZTRFMmNTQTV2MkI4ZGJWbUJkdjAreVRKdzl6VjRKSTluSzFvc1VCTktyZHF6SjVFY2lqYStlRGhNZkg5akZMQUhXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dfe62bf-80b5-497a-98fc-38291afbebbb", "record_id": "flaws_cloudtrail:0000199:7dfe62bf-80b5-497a-98fc-38291afbebbb", "row_index": 199, "timestamp": "2019-05-15T11:03:50Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dfe62bf-80b5-497a-98fc-38291afbebbb", "eventTime": "2019-05-15T11:03:50Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACLdX9fnqXe8g4bRRDopAnKFO98NRciXpnNO85XWS/bI0bbPrc1hzrW4Bt9GOIzNOIv8nTOb09NiJ22Rr6fxQrGrYGcT0Gd9970VoP9ryAD3+g==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec70e098-a376-4253-9634-0a234695fb91", "record_id": "flaws_cloudtrail:0000200:ec70e098-a376-4253-9634-0a234695fb91", "row_index": 200, "timestamp": "2019-05-15T11:03:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec70e098-a376-4253-9634-0a234695fb91", "eventTime": "2019-05-15T11:03:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFakFGOEprbU5EdExhRkZwdXVGYlgrMnlZdWFzYkZ0UUdpNENPK1FVZkdkVHdPam1uajlUN29xMGZyT3c3dFVFMnBUYytWaDdLL01mdXkvM21Oc3gwVytvdWN6c21jYmdnbUZ5T3pTb1R6MWpEbU9MOFducTcrekN1cUdUbDVBc1R1bzZENkJkMHNMZTRFMmNTQTV2MkI4ZGJWbUJkdjAreVRKdzl6VjRKSTluSzFvc1VCTktyZHF6SjVFY2lqYStlRGhNZkg5akZMQUhXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d14d714-0bca-469d-a0e5-45d0cda0bf2a", "record_id": "flaws_cloudtrail:0000201:9d14d714-0bca-469d-a0e5-45d0cda0bf2a", "row_index": 201, "timestamp": "2019-05-15T11:03:51Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d14d714-0bca-469d-a0e5-45d0cda0bf2a", "eventTime": "2019-05-15T11:03:51Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABjtrar9iZrjx1er2CjAJV9uucJ0/4Lm01jzVmygYJ3FmopGCGWeC1SikPpVFoPa1QCYaoawsZbatGVw2nOfzejv1FyiZg8pXcShi5NwWyRG7A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d14d714-0bca-469d-a0e5-45d0cda0bf2a", "record_id": "flaws_cloudtrail:0000202:9d14d714-0bca-469d-a0e5-45d0cda0bf2a", "row_index": 202, "timestamp": "2019-05-15T11:03:51Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d14d714-0bca-469d-a0e5-45d0cda0bf2a", "eventTime": "2019-05-15T11:03:51Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABjtrar9iZrjx1er2CjAJV9uucJ0/4Lm01jzVmygYJ3FmopGCGWeC1SikPpVFoPa1QCYaoawsZbatGVw2nOfzejv1FyiZg8pXcShi5NwWyRG7A==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba99b09-6600-4851-bf84-f8623e09f1a8", "record_id": "flaws_cloudtrail:0000203:6ba99b09-6600-4851-bf84-f8623e09f1a8", "row_index": 203, "timestamp": "2019-05-15T11:03:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba99b09-6600-4851-bf84-f8623e09f1a8", "eventTime": "2019-05-15T11:03:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAz8L4MCy07/9Pq5eHB2N7ppyavaq4VCAXdpmpBgf3YHV6tp5VEAF1ybIVCfRbAC0W6GlcYpq0vTzaIJdLWoCZhDmkjscbj3lQE19WCDnQt/aw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e863ea73-9d67-4050-a8e0-187db3c0772d", "record_id": "flaws_cloudtrail:0000204:e863ea73-9d67-4050-a8e0-187db3c0772d", "row_index": 204, "timestamp": "2019-05-15T11:03:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e863ea73-9d67-4050-a8e0-187db3c0772d", "eventTime": "2019-05-15T11:03:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjUUJzalppa1NqYkNhNW00UllhYTZFSWMwRWdxMnhhbzQyNXdoQ1lpRUt4ckdLckYvOXpWZnlwZWRBZUlEZlhFL1R1UC9LY1NkeEQ1RWZBTHVoRFdVWHRsb0ZuSnNPVVpBZG01ZGkybG9OM0J6SEZGTGhCLzRjM1FFRnYwUDlWanpNa0cxK1JJZ21keEtLd3ZsNDl6N3J5am5yaUs1MmNNUmhYa0RCTzh2ZWE2NUwzUjJEdzdRQkU4YzZBWmFnMS9kVmFSNWJFdkdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba99b09-6600-4851-bf84-f8623e09f1a8", "record_id": "flaws_cloudtrail:0000205:6ba99b09-6600-4851-bf84-f8623e09f1a8", "row_index": 205, "timestamp": "2019-05-15T11:03:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba99b09-6600-4851-bf84-f8623e09f1a8", "eventTime": "2019-05-15T11:03:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAz8L4MCy07/9Pq5eHB2N7ppyavaq4VCAXdpmpBgf3YHV6tp5VEAF1ybIVCfRbAC0W6GlcYpq0vTzaIJdLWoCZhDmkjscbj3lQE19WCDnQt/aw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e863ea73-9d67-4050-a8e0-187db3c0772d", "record_id": "flaws_cloudtrail:0000206:e863ea73-9d67-4050-a8e0-187db3c0772d", "row_index": 206, "timestamp": "2019-05-15T11:03:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e863ea73-9d67-4050-a8e0-187db3c0772d", "eventTime": "2019-05-15T11:03:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjUUJzalppa1NqYkNhNW00UllhYTZFSWMwRWdxMnhhbzQyNXdoQ1lpRUt4ckdLckYvOXpWZnlwZWRBZUlEZlhFL1R1UC9LY1NkeEQ1RWZBTHVoRFdVWHRsb0ZuSnNPVVpBZG01ZGkybG9OM0J6SEZGTGhCLzRjM1FFRnYwUDlWanpNa0cxK1JJZ21keEtLd3ZsNDl6N3J5am5yaUs1MmNNUmhYa0RCTzh2ZWE2NUwzUjJEdzdRQkU4YzZBWmFnMS9kVmFSNWJFdkdnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "353f0f9d-131e-4969-b188-8eca039a37eb", "record_id": "flaws_cloudtrail:0000207:353f0f9d-131e-4969-b188-8eca039a37eb", "row_index": 207, "timestamp": "2019-05-15T11:03:53Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "353f0f9d-131e-4969-b188-8eca039a37eb", "eventTime": "2019-05-15T11:03:53Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAdKxhMfCQGIvUaq2Z/wXLNignwhZ4drV6AQwaulmSjqd0INOYOGYcWOCuvLmnvGLQRsqjMyl2j7K1zRpZ6Nz7lgEcQeoCkTsFzfuTA0yqw+TA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06c6cffb-7580-45a8-a549-f47ed39fe908", "record_id": "flaws_cloudtrail:0000208:06c6cffb-7580-45a8-a549-f47ed39fe908", "row_index": 208, "timestamp": "2019-05-15T11:03:53Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06c6cffb-7580-45a8-a549-f47ed39fe908", "eventTime": "2019-05-15T11:03:53Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABNYUsDc2a6rTaisnzflaVpMs/76+BnW/wemaT5pIUiJSRElLjSQP6/+RpvubWmnMuyTdjujMyDts/8IdbEDEbIfQpOQFsmOtV1hXNxy39Q87Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29d0c82c-26d9-419a-8679-c192f98d4390", "record_id": "flaws_cloudtrail:0000209:29d0c82c-26d9-419a-8679-c192f98d4390", "row_index": 209, "timestamp": "2019-05-15T11:03:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29d0c82c-26d9-419a-8679-c192f98d4390", "eventTime": "2019-05-15T11:03:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZTGh6bU5mQjZUMDl5akJSRWZGQUNiUmwyd0RGNUN6ajRpbmVIMnRIWXpqOXN0cGc2MTRzMkV2SEZRMGYwOVFGeWczN1lKWjgyTmRPYlptL2tlSW0vblJRWCt1NFgrUE1uOUhqdkNCdWJhOGRwTzFRV2ZVK0QwUDhSZzRtV0NON3hNL3ZDeFVSTHRLay9XT2dlTkJXQzZFWDgwUDhrUHY4U1ZTZzRjOG1ZLzdPbzBEY1ZQemNVSy9SaVJyWWlXMzE3YS9QRjZkSFAyRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "353f0f9d-131e-4969-b188-8eca039a37eb", "record_id": "flaws_cloudtrail:0000210:353f0f9d-131e-4969-b188-8eca039a37eb", "row_index": 210, "timestamp": "2019-05-15T11:03:53Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "353f0f9d-131e-4969-b188-8eca039a37eb", "eventTime": "2019-05-15T11:03:53Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAdKxhMfCQGIvUaq2Z/wXLNignwhZ4drV6AQwaulmSjqd0INOYOGYcWOCuvLmnvGLQRsqjMyl2j7K1zRpZ6Nz7lgEcQeoCkTsFzfuTA0yqw+TA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06c6cffb-7580-45a8-a549-f47ed39fe908", "record_id": "flaws_cloudtrail:0000211:06c6cffb-7580-45a8-a549-f47ed39fe908", "row_index": 211, "timestamp": "2019-05-15T11:03:53Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06c6cffb-7580-45a8-a549-f47ed39fe908", "eventTime": "2019-05-15T11:03:53Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABNYUsDc2a6rTaisnzflaVpMs/76+BnW/wemaT5pIUiJSRElLjSQP6/+RpvubWmnMuyTdjujMyDts/8IdbEDEbIfQpOQFsmOtV1hXNxy39Q87Q==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29d0c82c-26d9-419a-8679-c192f98d4390", "record_id": "flaws_cloudtrail:0000212:29d0c82c-26d9-419a-8679-c192f98d4390", "row_index": 212, "timestamp": "2019-05-15T11:03:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29d0c82c-26d9-419a-8679-c192f98d4390", "eventTime": "2019-05-15T11:03:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZTGh6bU5mQjZUMDl5akJSRWZGQUNiUmwyd0RGNUN6ajRpbmVIMnRIWXpqOXN0cGc2MTRzMkV2SEZRMGYwOVFGeWczN1lKWjgyTmRPYlptL2tlSW0vblJRWCt1NFgrUE1uOUhqdkNCdWJhOGRwTzFRV2ZVK0QwUDhSZzRtV0NON3hNL3ZDeFVSTHRLay9XT2dlTkJXQzZFWDgwUDhrUHY4U1ZTZzRjOG1ZLzdPbzBEY1ZQemNVSy9SaVJyWWlXMzE3YS9QRjZkSFAyRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a2f6922-9faa-4540-bcfd-b0b252ba0d8a", "record_id": "flaws_cloudtrail:0000213:1a2f6922-9faa-4540-bcfd-b0b252ba0d8a", "row_index": 213, "timestamp": "2019-05-15T11:03:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a2f6922-9faa-4540-bcfd-b0b252ba0d8a", "eventTime": "2019-05-15T11:03:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUZWhJNmFzT1NyZUxBLzR1SExBWVMzV0JacEJ3RGpnRitneExwOXE3WU9RR3BCKytSSVVkYW5IOGFPRE81NXlnS3N3ZU1SNFhuSWw2dm5OU0RhcmJLNk5UOXlaS3N5TEpYcVZQSnk1bUYvZ3h6aDZFVXZrZ1NndDlDd0x6NFMvM0cwaFZDbGRteWdEWHk2MHJSZDQvS0Q0bzF1ZS9lTGZCN2lzTEt2SEU2czdZaW85VlVTM3VST1A1aWErc3RWYnZQb3hYNUNkUHJhTHdCbXpKMGI3bFBJSk0wcVM2S0FjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f48f6510-2040-4e4e-aaee-2b22134ed12c", "record_id": "flaws_cloudtrail:0000214:f48f6510-2040-4e4e-aaee-2b22134ed12c", "row_index": 214, "timestamp": "2019-05-15T11:03:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f48f6510-2040-4e4e-aaee-2b22134ed12c", "eventTime": "2019-05-15T11:03:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBS3N1TEFXalNlUXBJVjFqMDhYYktDSkF5TTB4MS9VSWZJbHdnQnY0VjZHZTBrcGR4YUl6MEh5cHVHc204RmZsVFQrTVRuR2lwVXM5Z1pJamwwZk16L1FTNi9NeW9wU3NiUkp4VDJQZE1palpyRE1JRktIb2xCYnVseGt1akp5WGU3N0VmcW9BZFFUU3E3VUx0eEJFbjlrOFM0OWFsbUQ3TWxUcmlUUU1aZjZEdlFlZThCcGg1dVBpTDBwMloyMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a2f6922-9faa-4540-bcfd-b0b252ba0d8a", "record_id": "flaws_cloudtrail:0000215:1a2f6922-9faa-4540-bcfd-b0b252ba0d8a", "row_index": 215, "timestamp": "2019-05-15T11:03:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a2f6922-9faa-4540-bcfd-b0b252ba0d8a", "eventTime": "2019-05-15T11:03:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUZWhJNmFzT1NyZUxBLzR1SExBWVMzV0JacEJ3RGpnRitneExwOXE3WU9RR3BCKytSSVVkYW5IOGFPRE81NXlnS3N3ZU1SNFhuSWw2dm5OU0RhcmJLNk5UOXlaS3N5TEpYcVZQSnk1bUYvZ3h6aDZFVXZrZ1NndDlDd0x6NFMvM0cwaFZDbGRteWdEWHk2MHJSZDQvS0Q0bzF1ZS9lTGZCN2lzTEt2SEU2czdZaW85VlVTM3VST1A1aWErc3RWYnZQb3hYNUNkUHJhTHdCbXpKMGI3bFBJSk0wcVM2S0FjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f48f6510-2040-4e4e-aaee-2b22134ed12c", "record_id": "flaws_cloudtrail:0000216:f48f6510-2040-4e4e-aaee-2b22134ed12c", "row_index": 216, "timestamp": "2019-05-15T11:03:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f48f6510-2040-4e4e-aaee-2b22134ed12c", "eventTime": "2019-05-15T11:03:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBS3N1TEFXalNlUXBJVjFqMDhYYktDSkF5TTB4MS9VSWZJbHdnQnY0VjZHZTBrcGR4YUl6MEh5cHVHc204RmZsVFQrTVRuR2lwVXM5Z1pJamwwZk16L1FTNi9NeW9wU3NiUkp4VDJQZE1palpyRE1JRktIb2xCYnVseGt1akp5WGU3N0VmcW9BZFFUU3E3VUx0eEJFbjlrOFM0OWFsbUQ3TWxUcmlUUU1aZjZEdlFlZThCcGg1dVBpTDBwMloyMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e479b85f-2d11-4ec1-8f14-0f6f1bee1697", "record_id": "flaws_cloudtrail:0000217:e479b85f-2d11-4ec1-8f14-0f6f1bee1697", "row_index": 217, "timestamp": "2019-05-15T11:03:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e479b85f-2d11-4ec1-8f14-0f6f1bee1697", "eventTime": "2019-05-15T11:03:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxeEZ0VXB6VEcyUzNYeWZQSEdlaVlsaHRNSzBGNHZ2U3k4VVMyOTJ0cDREY3F4ZUF5bU5aTll3aDlQdDBIYXJJNWhQMDlBemRVd0NQTW1MUnZHME5kanljaURSYVYzNkVlY0cwSXVOMU5UTFIzWHBuaVczbTAzcURpZ0lRRFBmbXhLcHRBQVFXbTFtNTJhdmhCT21MTVhkdG8zcE9iVXJ3bUNjRWpzQ2ZkcldWNU5QNGQ0QXFYVlJaMExnWkFzQU1UcUpURkhGcGE2Q1FVRzlGWlZaNndtS2pXMmpQcmNNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e479b85f-2d11-4ec1-8f14-0f6f1bee1697", "record_id": "flaws_cloudtrail:0000218:e479b85f-2d11-4ec1-8f14-0f6f1bee1697", "row_index": 218, "timestamp": "2019-05-15T11:03:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e479b85f-2d11-4ec1-8f14-0f6f1bee1697", "eventTime": "2019-05-15T11:03:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxeEZ0VXB6VEcyUzNYeWZQSEdlaVlsaHRNSzBGNHZ2U3k4VVMyOTJ0cDREY3F4ZUF5bU5aTll3aDlQdDBIYXJJNWhQMDlBemRVd0NQTW1MUnZHME5kanljaURSYVYzNkVlY0cwSXVOMU5UTFIzWHBuaVczbTAzcURpZ0lRRFBmbXhLcHRBQVFXbTFtNTJhdmhCT21MTVhkdG8zcE9iVXJ3bUNjRWpzQ2ZkcldWNU5QNGQ0QXFYVlJaMExnWkFzQU1UcUpURkhGcGE2Q1FVRzlGWlZaNndtS2pXMmpQcmNNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1725a30c-a0bf-4b02-9766-7de338cb9191", "record_id": "flaws_cloudtrail:0000219:1725a30c-a0bf-4b02-9766-7de338cb9191", "row_index": 219, "timestamp": "2019-05-15T11:03:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1725a30c-a0bf-4b02-9766-7de338cb9191", "eventTime": "2019-05-15T11:03:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqN2tRK2RvWjBkaVdYRFlvazFxNFhYYXBEZXc4bVRuZkFKK0ZkRVRKY2hPNWZKU2g5djl2M014aFcxaFI3ZlBUcDBNTldSSjc5N2ZrUE4xTmhXWGNZcmNsOUNCVHU5OXNQMkVWQkRxVTQ0RnhoR2Q5Mm81VGdHV0Z2L3pjMkRvWkNscDZNazcrSmxPeVpRM0IvalJubXNER2NrdkNCMTdWbVppTE5TbEl0MGdWdUZwbWEvNkxxK2hBdVFBSlZSMEY3NExwVmcwRmpLS256Z0h6SHV2SE5pcnVsbHlNd3NzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1725a30c-a0bf-4b02-9766-7de338cb9191", "record_id": "flaws_cloudtrail:0000220:1725a30c-a0bf-4b02-9766-7de338cb9191", "row_index": 220, "timestamp": "2019-05-15T11:03:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1725a30c-a0bf-4b02-9766-7de338cb9191", "eventTime": "2019-05-15T11:03:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqN2tRK2RvWjBkaVdYRFlvazFxNFhYYXBEZXc4bVRuZkFKK0ZkRVRKY2hPNWZKU2g5djl2M014aFcxaFI3ZlBUcDBNTldSSjc5N2ZrUE4xTmhXWGNZcmNsOUNCVHU5OXNQMkVWQkRxVTQ0RnhoR2Q5Mm81VGdHV0Z2L3pjMkRvWkNscDZNazcrSmxPeVpRM0IvalJubXNER2NrdkNCMTdWbVppTE5TbEl0MGdWdUZwbWEvNkxxK2hBdVFBSlZSMEY3NExwVmcwRmpLS256Z0h6SHV2SE5pcnVsbHlNd3NzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c3b699a-64a2-422d-ba4f-97468f033736", "record_id": "flaws_cloudtrail:0000221:8c3b699a-64a2-422d-ba4f-97468f033736", "row_index": 221, "timestamp": "2019-05-15T11:03:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c3b699a-64a2-422d-ba4f-97468f033736", "eventTime": "2019-05-15T11:03:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQMGNPOEVONzZ5WHgvS3BKMDlWK0k4KzNFamQrUkxrY2dwU25uSmVCWVVGVlFBc2x1YnRCUHNCRXFzdVNyZkNTL1pJSmFxYWpxd244b3lRdVhVSjhiVkhKalFYMTdiOWlaNXViRjA4UnpxMWlXaDMrRzZQY085M0dTYjVhQXpoZlllaXZkeU1KNzZuQ3QxN2tHRTd0cngwVFV0WUVacExBOU1UTFdkNGQ3eHViV01Ga3NhdllhaEZkbTA0U1JyST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c3b699a-64a2-422d-ba4f-97468f033736", "record_id": "flaws_cloudtrail:0000222:8c3b699a-64a2-422d-ba4f-97468f033736", "row_index": 222, "timestamp": "2019-05-15T11:03:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c3b699a-64a2-422d-ba4f-97468f033736", "eventTime": "2019-05-15T11:03:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQMGNPOEVONzZ5WHgvS3BKMDlWK0k4KzNFamQrUkxrY2dwU25uSmVCWVVGVlFBc2x1YnRCUHNCRXFzdVNyZkNTL1pJSmFxYWpxd244b3lRdVhVSjhiVkhKalFYMTdiOWlaNXViRjA4UnpxMWlXaDMrRzZQY085M0dTYjVhQXpoZlllaXZkeU1KNzZuQ3QxN2tHRTd0cngwVFV0WUVacExBOU1UTFdkNGQ3eHViV01Ga3NhdllhaEZkbTA0U1JyST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb34488-90ab-49e8-b84f-e50d82af122a", "record_id": "flaws_cloudtrail:0000223:bb34488-90ab-49e8-b84f-e50d82af122a", "row_index": 223, "timestamp": "2019-05-15T11:03:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb34488-90ab-49e8-b84f-e50d82af122a", "eventTime": "2019-05-15T11:03:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTN3ZOamt6anpOSmJVT01SSGo3S1R0S3FXQ1ZETkZEZytjUlR3cmd0TlFwSXg4UFJvWDFLWXoxVE5GSjhoS3QrWCtpV0hRNC9BazZWb1lCQnVUTnpNaG1HdGZWc3F2ZFFaWjUxaDhNVUxEcHo3bGk1RHVLekJzb2RQTVkwRDl0eGFyN0EyUUVCWXZlNXQyMTIvaStZMFE1TWthYzJNNllZcUMza3hjU2JPSjk3ZFFmSndITnlZRFQzdS8xRFZKZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ae5f24-15fd-4946-a549-aab4cdbc678b", "record_id": "flaws_cloudtrail:0000224:03ae5f24-15fd-4946-a549-aab4cdbc678b", "row_index": 224, "timestamp": "2019-05-15T11:03:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ae5f24-15fd-4946-a549-aab4cdbc678b", "eventTime": "2019-05-15T11:03:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxRXdHTjNzMjVmRnpuUC9uSmhiR0luWXVuZ0dTRmxSbmtpYzhwVnpWQ0ZXcW15VTF3b25aK0MvaFdBSTYxRExGUDlIYkp2WmYvYnEzSVZOQU94Nmo1dVBFYW9FUDlpUzBhWHVWWWdla1ZpSGdjb2o5Q0FCa2NyblF2UlJQZzJIWkdvS2ZZUnlOaG1lUVUrZ2JNcFRrN0lha1RVRUJ5UWM2bkZDanNOTVVrem5YeTVxYUtqcDkvTFBlN2x3VThGdXZTVjBMWC9ibEttWHh6aUtGYUk4VjN4U1pUN0o2SkFrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb34488-90ab-49e8-b84f-e50d82af122a", "record_id": "flaws_cloudtrail:0000225:bb34488-90ab-49e8-b84f-e50d82af122a", "row_index": 225, "timestamp": "2019-05-15T11:03:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb34488-90ab-49e8-b84f-e50d82af122a", "eventTime": "2019-05-15T11:03:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTN3ZOamt6anpOSmJVT01SSGo3S1R0S3FXQ1ZETkZEZytjUlR3cmd0TlFwSXg4UFJvWDFLWXoxVE5GSjhoS3QrWCtpV0hRNC9BazZWb1lCQnVUTnpNaG1HdGZWc3F2ZFFaWjUxaDhNVUxEcHo3bGk1RHVLekJzb2RQTVkwRDl0eGFyN0EyUUVCWXZlNXQyMTIvaStZMFE1TWthYzJNNllZcUMza3hjU2JPSjk3ZFFmSndITnlZRFQzdS8xRFZKZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ae5f24-15fd-4946-a549-aab4cdbc678b", "record_id": "flaws_cloudtrail:0000226:03ae5f24-15fd-4946-a549-aab4cdbc678b", "row_index": 226, "timestamp": "2019-05-15T11:03:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ae5f24-15fd-4946-a549-aab4cdbc678b", "eventTime": "2019-05-15T11:03:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxRXdHTjNzMjVmRnpuUC9uSmhiR0luWXVuZ0dTRmxSbmtpYzhwVnpWQ0ZXcW15VTF3b25aK0MvaFdBSTYxRExGUDlIYkp2WmYvYnEzSVZOQU94Nmo1dVBFYW9FUDlpUzBhWHVWWWdla1ZpSGdjb2o5Q0FCa2NyblF2UlJQZzJIWkdvS2ZZUnlOaG1lUVUrZ2JNcFRrN0lha1RVRUJ5UWM2bkZDanNOTVVrem5YeTVxYUtqcDkvTFBlN2x3VThGdXZTVjBMWC9ibEttWHh6aUtGYUk4VjN4U1pUN0o2SkFrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b990ab-7474-4618-8fec-968f59b39329", "record_id": "flaws_cloudtrail:0000227:55b990ab-7474-4618-8fec-968f59b39329", "row_index": 227, "timestamp": "2019-05-15T11:03:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b990ab-7474-4618-8fec-968f59b39329", "eventTime": "2019-05-15T11:03:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2UDhoTkZMQkZwNnBhV0EzWDVCdjFOQUl2WjFwcm42MjIxMlZ1RWVhUnB4ZDdlSkRNVGhjY3JMbFJmbk9hMjVBOHBQYVJuN1ZNb2pKVWVHcTFQbWRsbEZXcGZDUWJCNVM3bHRieEhSU1RxZitOK01QTmtJbU9UZTVMV2NiZC93NFFqQmE2OXFOTzVKZVQrbUVzZkFGeERCVWlKZEtGSUtrWndKKzBPYVpjK3FCRkpXS2tVdlkwbXE1VjV3ZmJwcGUrb3ZVdmVnc2hMck1GOEIxMEgvbFVoanIyeWdyUWpZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610a6189-da4a-4a3b-b9dc-b3afb1f50373", "record_id": "flaws_cloudtrail:0000228:610a6189-da4a-4a3b-b9dc-b3afb1f50373", "row_index": 228, "timestamp": "2019-05-15T11:03:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610a6189-da4a-4a3b-b9dc-b3afb1f50373", "eventTime": "2019-05-15T11:03:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TitXa0dkdEpjN1ZKS20xZkxWMjl2dXFCTEE0VHpseHF6WVdjeCtFVGsrNlBDWm8xZWJEWUhVYWxoVmpmNkpKWllYQnJZTjhDMVc2eTFOMkFraUJVZUVmdlVnKzZ5Q3Q3SkUza2x0S2hDdXNhb05WSFVsRGhESGwvYitYTEl2VGI1MlVvTEZDN3hMbWwxVndKdXpPTEMzRHRiOVcybjdEazdDaWdGd0tMWDRoMEFGcW9vdnRiZWhURDRncU5wbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b990ab-7474-4618-8fec-968f59b39329", "record_id": "flaws_cloudtrail:0000229:55b990ab-7474-4618-8fec-968f59b39329", "row_index": 229, "timestamp": "2019-05-15T11:03:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b990ab-7474-4618-8fec-968f59b39329", "eventTime": "2019-05-15T11:03:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2UDhoTkZMQkZwNnBhV0EzWDVCdjFOQUl2WjFwcm42MjIxMlZ1RWVhUnB4ZDdlSkRNVGhjY3JMbFJmbk9hMjVBOHBQYVJuN1ZNb2pKVWVHcTFQbWRsbEZXcGZDUWJCNVM3bHRieEhSU1RxZitOK01QTmtJbU9UZTVMV2NiZC93NFFqQmE2OXFOTzVKZVQrbUVzZkFGeERCVWlKZEtGSUtrWndKKzBPYVpjK3FCRkpXS2tVdlkwbXE1VjV3ZmJwcGUrb3ZVdmVnc2hMck1GOEIxMEgvbFVoanIyeWdyUWpZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610a6189-da4a-4a3b-b9dc-b3afb1f50373", "record_id": "flaws_cloudtrail:0000230:610a6189-da4a-4a3b-b9dc-b3afb1f50373", "row_index": 230, "timestamp": "2019-05-15T11:03:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610a6189-da4a-4a3b-b9dc-b3afb1f50373", "eventTime": "2019-05-15T11:03:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TitXa0dkdEpjN1ZKS20xZkxWMjl2dXFCTEE0VHpseHF6WVdjeCtFVGsrNlBDWm8xZWJEWUhVYWxoVmpmNkpKWllYQnJZTjhDMVc2eTFOMkFraUJVZUVmdlVnKzZ5Q3Q3SkUza2x0S2hDdXNhb05WSFVsRGhESGwvYitYTEl2VGI1MlVvTEZDN3hMbWwxVndKdXpPTEMzRHRiOVcybjdEazdDaWdGd0tMWDRoMEFGcW9vdnRiZWhURDRncU5wbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40947-b67d-409e-8267-eb505c1c0a1f", "record_id": "flaws_cloudtrail:0000231:40947-b67d-409e-8267-eb505c1c0a1f", "row_index": 231, "timestamp": "2019-05-15T11:06:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1167, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40947-b67d-409e-8267-eb505c1c0a1f", "eventTime": "2019-05-15T11:06:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40947-b67d-409e-8267-eb505c1c0a1f", "record_id": "flaws_cloudtrail:0000232:40947-b67d-409e-8267-eb505c1c0a1f", "row_index": 232, "timestamp": "2019-05-15T11:06:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1167, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40947-b67d-409e-8267-eb505c1c0a1f", "eventTime": "2019-05-15T11:06:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbb66ca7-0d8e-4386-b4ff-b93026fabb55", "record_id": "flaws_cloudtrail:0000233:bbb66ca7-0d8e-4386-b4ff-b93026fabb55", "row_index": 233, "timestamp": "2019-05-15T11:06:17Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbb66ca7-0d8e-4386-b4ff-b93026fabb55", "eventTime": "2019-05-15T11:06:17Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbb66ca7-0d8e-4386-b4ff-b93026fabb55", "record_id": "flaws_cloudtrail:0000234:bbb66ca7-0d8e-4386-b4ff-b93026fabb55", "row_index": 234, "timestamp": "2019-05-15T11:06:17Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbb66ca7-0d8e-4386-b4ff-b93026fabb55", "eventTime": "2019-05-15T11:06:17Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d34f0e7c-9b77-4889-864b-0b83900d6c95", "record_id": "flaws_cloudtrail:0000235:d34f0e7c-9b77-4889-864b-0b83900d6c95", "row_index": 235, "timestamp": "2019-05-15T11:06:18Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d34f0e7c-9b77-4889-864b-0b83900d6c95", "eventTime": "2019-05-15T11:06:18Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ADDGKwJ50/DspDiTeA4zkOqQ/myCEwBCmoONuTuuvJw0/7JxK83Pam0pvXnkc3bSWxreJ5M2VV6BdjPH860xiDXm92RJf3vgsztTB/2V7/1sug==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d34f0e7c-9b77-4889-864b-0b83900d6c95", "record_id": "flaws_cloudtrail:0000236:d34f0e7c-9b77-4889-864b-0b83900d6c95", "row_index": 236, "timestamp": "2019-05-15T11:06:18Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d34f0e7c-9b77-4889-864b-0b83900d6c95", "eventTime": "2019-05-15T11:06:18Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ADDGKwJ50/DspDiTeA4zkOqQ/myCEwBCmoONuTuuvJw0/7JxK83Pam0pvXnkc3bSWxreJ5M2VV6BdjPH860xiDXm92RJf3vgsztTB/2V7/1sug==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c690103-5457-41a2-b120-b162e5d3b5ab", "record_id": "flaws_cloudtrail:0000237:c690103-5457-41a2-b120-b162e5d3b5ab", "row_index": 237, "timestamp": "2019-05-15T11:06:19Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c690103-5457-41a2-b120-b162e5d3b5ab", "eventTime": "2019-05-15T11:06:19Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAfp8ukD6xUEv4NCCVmMeSwP83FKHw1G1c9VQvsvZ6ifp4cw0E3KPqsr2UxjyQQuoaYQG5OMwOvQGtMuwvxvRBq9mIp+UqhoM8PdEumk+HXFUQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d94a519-4764-471a-bb11-805e475732de3", "record_id": "flaws_cloudtrail:0000238:7d94a519-4764-471a-bb11-805e475732de3", "row_index": 238, "timestamp": "2019-05-15T11:06:19Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d94a519-4764-471a-bb11-805e475732de3", "eventTime": "2019-05-15T11:06:19Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAw5EGCtYnR5jaeHTTxnG0Lyb/Ih34pBr0MqV0F8H3XjP2F3s3d1ByUE7wThzqHRaAHFkzMLJCFKuJAnzmYHVtyn9Ojtc7Kp3Ilaf+Jq0eJMdg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c690103-5457-41a2-b120-b162e5d3b5ab", "record_id": "flaws_cloudtrail:0000239:c690103-5457-41a2-b120-b162e5d3b5ab", "row_index": 239, "timestamp": "2019-05-15T11:06:19Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c690103-5457-41a2-b120-b162e5d3b5ab", "eventTime": "2019-05-15T11:06:19Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAfp8ukD6xUEv4NCCVmMeSwP83FKHw1G1c9VQvsvZ6ifp4cw0E3KPqsr2UxjyQQuoaYQG5OMwOvQGtMuwvxvRBq9mIp+UqhoM8PdEumk+HXFUQ==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d94a519-4764-471a-bb11-805e475732de3", "record_id": "flaws_cloudtrail:0000240:7d94a519-4764-471a-bb11-805e475732de3", "row_index": 240, "timestamp": "2019-05-15T11:06:19Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d94a519-4764-471a-bb11-805e475732de3", "eventTime": "2019-05-15T11:06:19Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "AAw5EGCtYnR5jaeHTTxnG0Lyb/Ih34pBr0MqV0F8H3XjP2F3s3d1ByUE7wThzqHRaAHFkzMLJCFKuJAnzmYHVtyn9Ojtc7Kp3Ilaf+Jq0eJMdg==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383d088a-2361-45ac-aa3d-b3841c955eaa", "record_id": "flaws_cloudtrail:0000241:383d088a-2361-45ac-aa3d-b3841c955eaa", "row_index": 241, "timestamp": "2019-05-15T11:06:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383d088a-2361-45ac-aa3d-b3841c955eaa", "eventTime": "2019-05-15T11:06:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABYlCB8ZguBJWWIiAnQ9dSDf6XLVH2zVc+cfmjxy/WvGvpyRvlJaA76L+Qj8UnoQrmi8fN+Y6w5hpzmohXriN4C97jQA2s0UtqcIIBFrBJojAA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2d107ad-a8fc-4ad7-b714-fef7a62be9e4", "record_id": "flaws_cloudtrail:0000242:f2d107ad-a8fc-4ad7-b714-fef7a62be9e4", "row_index": 242, "timestamp": "2019-05-15T11:06:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2d107ad-a8fc-4ad7-b714-fef7a62be9e4", "eventTime": "2019-05-15T11:06:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACSP8bE8s88WiCyOsOxoHkdGCNkf12rOAG8HyJxCyNliJBGzE2QwwnjVedsjFZngwOuFno3JetzkYWzUBVku/YIwhA0NtOOaYp5Zl6FW7ddGdw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383d088a-2361-45ac-aa3d-b3841c955eaa", "record_id": "flaws_cloudtrail:0000243:383d088a-2361-45ac-aa3d-b3841c955eaa", "row_index": 243, "timestamp": "2019-05-15T11:06:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383d088a-2361-45ac-aa3d-b3841c955eaa", "eventTime": "2019-05-15T11:06:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ABYlCB8ZguBJWWIiAnQ9dSDf6XLVH2zVc+cfmjxy/WvGvpyRvlJaA76L+Qj8UnoQrmi8fN+Y6w5hpzmohXriN4C97jQA2s0UtqcIIBFrBJojAA==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2d107ad-a8fc-4ad7-b714-fef7a62be9e4", "record_id": "flaws_cloudtrail:0000244:f2d107ad-a8fc-4ad7-b714-fef7a62be9e4", "row_index": 244, "timestamp": "2019-05-15T11:06:20Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2d107ad-a8fc-4ad7-b714-fef7a62be9e4", "eventTime": "2019-05-15T11:06:20Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"marker": "ACSP8bE8s88WiCyOsOxoHkdGCNkf12rOAG8HyJxCyNliJBGzE2QwwnjVedsjFZngwOuFno3JetzkYWzUBVku/YIwhA0NtOOaYp5Zl6FW7ddGdw==", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce7df43-d763-4c3f-af26-c31e3bff6281", "record_id": "flaws_cloudtrail:0000245:2ce7df43-d763-4c3f-af26-c31e3bff6281", "row_index": 245, "timestamp": "2019-05-15T11:07:13Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce7df43-d763-4c3f-af26-c31e3bff6281", "eventTime": "2019-05-15T11:07:13Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce7df43-d763-4c3f-af26-c31e3bff6281", "record_id": "flaws_cloudtrail:0000246:2ce7df43-d763-4c3f-af26-c31e3bff6281", "row_index": 246, "timestamp": "2019-05-15T11:07:13Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce7df43-d763-4c3f-af26-c31e3bff6281", "eventTime": "2019-05-15T11:07:13Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34d6572-9372-4f3e-bafe-fbb053592a4d", "record_id": "flaws_cloudtrail:0000247:c34d6572-9372-4f3e-bafe-fbb053592a4d", "row_index": 247, "timestamp": "2019-05-15T11:07:28Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34d6572-9372-4f3e-bafe-fbb053592a4d", "eventTime": "2019-05-15T11:07:28Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34d6572-9372-4f3e-bafe-fbb053592a4d", "record_id": "flaws_cloudtrail:0000248:c34d6572-9372-4f3e-bafe-fbb053592a4d", "row_index": 248, "timestamp": "2019-05-15T11:07:28Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34d6572-9372-4f3e-bafe-fbb053592a4d", "eventTime": "2019-05-15T11:07:28Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff9f814-f2a9-4371-8446-9f2f6571e2f0", "record_id": "flaws_cloudtrail:0000249:cff9f814-f2a9-4371-8446-9f2f6571e2f0", "row_index": 249, "timestamp": "2019-05-15T11:07:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff9f814-f2a9-4371-8446-9f2f6571e2f0", "eventTime": "2019-05-15T11:07:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff9f814-f2a9-4371-8446-9f2f6571e2f0", "record_id": "flaws_cloudtrail:0000250:cff9f814-f2a9-4371-8446-9f2f6571e2f0", "row_index": 250, "timestamp": "2019-05-15T11:07:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff9f814-f2a9-4371-8446-9f2f6571e2f0", "eventTime": "2019-05-15T11:07:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "586e9baa-5e47-4478-a76d-ad0493a58efb", "record_id": "flaws_cloudtrail:0000251:586e9baa-5e47-4478-a76d-ad0493a58efb", "row_index": 251, "timestamp": "2019-05-15T11:07:42Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "586e9baa-5e47-4478-a76d-ad0493a58efb", "eventTime": "2019-05-15T11:07:42Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "586e9baa-5e47-4478-a76d-ad0493a58efb", "record_id": "flaws_cloudtrail:0000252:586e9baa-5e47-4478-a76d-ad0493a58efb", "row_index": 252, "timestamp": "2019-05-15T11:07:42Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "586e9baa-5e47-4478-a76d-ad0493a58efb", "eventTime": "2019-05-15T11:07:42Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a225c4ac-4972-4bdb-b90e-072e98124fbb", "record_id": "flaws_cloudtrail:0000253:a225c4ac-4972-4bdb-b90e-072e98124fbb", "row_index": 253, "timestamp": "2019-05-15T11:07:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a225c4ac-4972-4bdb-b90e-072e98124fbb", "eventTime": "2019-05-15T11:07:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a225c4ac-4972-4bdb-b90e-072e98124fbb", "record_id": "flaws_cloudtrail:0000254:a225c4ac-4972-4bdb-b90e-072e98124fbb", "row_index": 254, "timestamp": "2019-05-15T11:07:58Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a225c4ac-4972-4bdb-b90e-072e98124fbb", "eventTime": "2019-05-15T11:07:58Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"scope": "Local", "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a6abc7-ce01-485e-bea9-4ca032c569473", "record_id": "flaws_cloudtrail:0000255:90a6abc7-ce01-485e-bea9-4ca032c569473", "row_index": 255, "timestamp": "2019-05-15T11:08:34Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a6abc7-ce01-485e-bea9-4ca032c569473", "eventTime": "2019-05-15T11:08:34Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a6abc7-ce01-485e-bea9-4ca032c569473", "record_id": "flaws_cloudtrail:0000256:90a6abc7-ce01-485e-bea9-4ca032c569473", "row_index": 256, "timestamp": "2019-05-15T11:08:34Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a6abc7-ce01-485e-bea9-4ca032c569473", "eventTime": "2019-05-15T11:08:34Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722927e19-0ff0-48bd-ad34-3fb887a8ab41", "record_id": "flaws_cloudtrail:0000257:722927e19-0ff0-48bd-ad34-3fb887a8ab41", "row_index": 257, "timestamp": "2019-05-15T11:08:40Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722927e19-0ff0-48bd-ad34-3fb887a8ab41", "eventTime": "2019-05-15T11:08:40Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722927e19-0ff0-48bd-ad34-3fb887a8ab41", "record_id": "flaws_cloudtrail:0000258:722927e19-0ff0-48bd-ad34-3fb887a8ab41", "row_index": 258, "timestamp": "2019-05-15T11:08:40Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722927e19-0ff0-48bd-ad34-3fb887a8ab41", "eventTime": "2019-05-15T11:08:40Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff117692-074a-468f-a663-b606ea8a9300", "record_id": "flaws_cloudtrail:0000259:ff117692-074a-468f-a663-b606ea8a9300", "row_index": 259, "timestamp": "2019-05-15T11:08:53Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff117692-074a-468f-a663-b606ea8a9300", "eventTime": "2019-05-15T11:08:53Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff117692-074a-468f-a663-b606ea8a9300", "record_id": "flaws_cloudtrail:0000260:ff117692-074a-468f-a663-b606ea8a9300", "row_index": 260, "timestamp": "2019-05-15T11:08:53Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff117692-074a-468f-a663-b606ea8a9300", "eventTime": "2019-05-15T11:08:53Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91842ee-e33f-427e-88f2-193e4a338922d", "record_id": "flaws_cloudtrail:0000261:91842ee-e33f-427e-88f2-193e4a338922d", "row_index": 261, "timestamp": "2019-05-15T11:08:58Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91842ee-e33f-427e-88f2-193e4a338922d", "eventTime": "2019-05-15T11:08:58Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91842ee-e33f-427e-88f2-193e4a338922d", "record_id": "flaws_cloudtrail:0000262:91842ee-e33f-427e-88f2-193e4a338922d", "row_index": 262, "timestamp": "2019-05-15T11:08:58Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91842ee-e33f-427e-88f2-193e4a338922d", "eventTime": "2019-05-15T11:08:58Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271fdef2-66c8-4e09-b778-48abfcdecd40", "record_id": "flaws_cloudtrail:0000263:271fdef2-66c8-4e09-b778-48abfcdecd40", "row_index": 263, "timestamp": "2019-05-15T11:09:12Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271fdef2-66c8-4e09-b778-48abfcdecd40", "eventTime": "2019-05-15T11:09:12Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271fdef2-66c8-4e09-b778-48abfcdecd40", "record_id": "flaws_cloudtrail:0000264:271fdef2-66c8-4e09-b778-48abfcdecd40", "row_index": 264, "timestamp": "2019-05-15T11:09:12Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271fdef2-66c8-4e09-b778-48abfcdecd40", "eventTime": "2019-05-15T11:09:12Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name MySecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "MySecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaafcf53-2c48-4b07-b482-d1c886303", "record_id": "flaws_cloudtrail:0000265:aaafcf53-2c48-4b07-b482-d1c886303", "row_index": 265, "timestamp": "2019-05-15T11:10:19Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaafcf53-2c48-4b07-b482-d1c886303", "eventTime": "2019-05-15T11:10:19Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaafcf53-2c48-4b07-b482-d1c886303", "record_id": "flaws_cloudtrail:0000266:aaafcf53-2c48-4b07-b482-d1c886303", "row_index": 266, "timestamp": "2019-05-15T11:10:19Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaafcf53-2c48-4b07-b482-d1c886303", "eventTime": "2019-05-15T11:10:19Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e46ef3-6e9e-4d73-9f41-b0fdb98be465", "record_id": "flaws_cloudtrail:0000267:23e46ef3-6e9e-4d73-9f41-b0fdb98be465", "row_index": 267, "timestamp": "2019-05-15T11:11:18Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e46ef3-6e9e-4d73-9f41-b0fdb98be465", "eventTime": "2019-05-15T11:11:18Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: role Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e46ef3-6e9e-4d73-9f41-b0fdb98be465", "record_id": "flaws_cloudtrail:0000268:23e46ef3-6e9e-4d73-9f41-b0fdb98be465", "row_index": 268, "timestamp": "2019-05-15T11:11:18Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e46ef3-6e9e-4d73-9f41-b0fdb98be465", "eventTime": "2019-05-15T11:11:18Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: role Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "595f0dcb-fc63-4fe6-8d2c-617bf7ba3dc0", "record_id": "flaws_cloudtrail:0000269:595f0dcb-fc63-4fe6-8d2c-617bf7ba3dc0", "row_index": 269, "timestamp": "2019-05-15T11:11:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "595f0dcb-fc63-4fe6-8d2c-617bf7ba3dc0", "eventTime": "2019-05-15T11:11:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "595f0dcb-fc63-4fe6-8d2c-617bf7ba3dc0", "record_id": "flaws_cloudtrail:0000270:595f0dcb-fc63-4fe6-8d2c-617bf7ba3dc0", "row_index": 270, "timestamp": "2019-05-15T11:11:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "595f0dcb-fc63-4fe6-8d2c-617bf7ba3dc0", "eventTime": "2019-05-15T11:11:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d5c4592-2e2a-4631-895b-5e3fb20ce9eb", "record_id": "flaws_cloudtrail:0000271:8d5c4592-2e2a-4631-895b-5e3fb20ce9eb", "row_index": 271, "timestamp": "2019-05-15T11:12:13Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1182, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d5c4592-2e2a-4631-895b-5e3fb20ce9eb", "eventTime": "2019-05-15T11:12:13Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetPolicy on resource: policy arn:aws:iam::811596193553:policy/list_apigateways", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d5c4592-2e2a-4631-895b-5e3fb20ce9eb", "record_id": "flaws_cloudtrail:0000272:8d5c4592-2e2a-4631-895b-5e3fb20ce9eb", "row_index": 272, "timestamp": "2019-05-15T11:12:13Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1182, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d5c4592-2e2a-4631-895b-5e3fb20ce9eb", "eventTime": "2019-05-15T11:12:13Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetPolicy on resource: policy arn:aws:iam::811596193553:policy/list_apigateways", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea165ad3-957c-4677-b804-37a5ec169feb", "record_id": "flaws_cloudtrail:0000273:ea165ad3-957c-4677-b804-37a5ec169feb", "row_index": 273, "timestamp": "2019-05-15T11:12:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1179, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea165ad3-957c-4677-b804-37a5ec169feb", "eventTime": "2019-05-15T11:12:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetPolicy on resource: policy arn:aws:iam::811596193553:policy/MySecurityAudit", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea165ad3-957c-4677-b804-37a5ec169feb", "record_id": "flaws_cloudtrail:0000274:ea165ad3-957c-4677-b804-37a5ec169feb", "row_index": 274, "timestamp": "2019-05-15T11:12:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAWANUHOQRP0KRNA3Y", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1179, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea165ad3-957c-4677-b804-37a5ec169feb", "eventTime": "2019-05-15T11:12:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetPolicy on resource: policy arn:aws:iam::811596193553:policy/MySecurityAudit", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAWANUHOQRP0KRNA3Y", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T10:01:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdd252fa-c6fc-42f1-beb5-322694c6ae7dd", "record_id": "flaws_cloudtrail:0000275:cdd252fa-c6fc-42f1-beb5-322694c6ae7dd", "row_index": 275, "timestamp": "2019-05-15T11:13:38Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdd252fa-c6fc-42f1-beb5-322694c6ae7dd", "eventTime": "2019-05-15T11:13:38Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdd252fa-c6fc-42f1-beb5-322694c6ae7dd", "record_id": "flaws_cloudtrail:0000276:cdd252fa-c6fc-42f1-beb5-322694c6ae7dd", "row_index": 276, "timestamp": "2019-05-15T11:13:38Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdd252fa-c6fc-42f1-beb5-322694c6ae7dd", "eventTime": "2019-05-15T11:13:38Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49e8fc5a-9ea4-443b-aef5-e723d48c8912", "record_id": "flaws_cloudtrail:0000277:49e8fc5a-9ea4-443b-aef5-e723d48c8912", "row_index": 277, "timestamp": "2019-05-15T11:14:41Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49e8fc5a-9ea4-443b-aef5-e723d48c8912", "eventTime": "2019-05-15T11:14:41Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49e8fc5a-9ea4-443b-aef5-e723d48c8912", "record_id": "flaws_cloudtrail:0000278:49e8fc5a-9ea4-443b-aef5-e723d48c8912", "row_index": 278, "timestamp": "2019-05-15T11:14:41Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49e8fc5a-9ea4-443b-aef5-e723d48c8912", "eventTime": "2019-05-15T11:14:41Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "646a2e63-bb76-4376-a959-92059b4b3839", "record_id": "flaws_cloudtrail:0000279:646a2e63-bb76-4376-a959-92059b4b3839", "row_index": 279, "timestamp": "2019-05-15T11:14:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "646a2e63-bb76-4376-a959-92059b4b3839", "eventTime": "2019-05-15T11:14:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "646a2e63-bb76-4376-a959-92059b4b3839", "record_id": "flaws_cloudtrail:0000280:646a2e63-bb76-4376-a959-92059b4b3839", "row_index": 280, "timestamp": "2019-05-15T11:14:58Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "646a2e63-bb76-4376-a959-92059b4b3839", "eventTime": "2019-05-15T11:14:58Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ad3847-1feb-4d4a-b22d-cdf46c75c068", "record_id": "flaws_cloudtrail:0000281:03ad3847-1feb-4d4a-b22d-cdf46c75c068", "row_index": 281, "timestamp": "2019-05-15T11:15:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ad3847-1feb-4d4a-b22d-cdf46c75c068", "eventTime": "2019-05-15T11:15:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03ad3847-1feb-4d4a-b22d-cdf46c75c068", "record_id": "flaws_cloudtrail:0000282:03ad3847-1feb-4d4a-b22d-cdf46c75c068", "row_index": 282, "timestamp": "2019-05-15T11:15:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03ad3847-1feb-4d4a-b22d-cdf46c75c068", "eventTime": "2019-05-15T11:15:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f09072-156e-4954-ac4d-6e0c3f3ec201", "record_id": "flaws_cloudtrail:0000283:2f09072-156e-4954-ac4d-6e0c3f3ec201", "row_index": 283, "timestamp": "2019-05-15T11:15:29Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f09072-156e-4954-ac4d-6e0c3f3ec201", "eventTime": "2019-05-15T11:15:29Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f09072-156e-4954-ac4d-6e0c3f3ec201", "record_id": "flaws_cloudtrail:0000284:2f09072-156e-4954-ac4d-6e0c3f3ec201", "row_index": 284, "timestamp": "2019-05-15T11:15:29Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f09072-156e-4954-ac4d-6e0c3f3ec201", "eventTime": "2019-05-15T11:15:29Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6478a59-8994-4c7f-918e-0f2bdb78d9f4", "record_id": "flaws_cloudtrail:0000285:b6478a59-8994-4c7f-918e-0f2bdb78d9f4", "row_index": 285, "timestamp": "2019-05-15T11:15:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6478a59-8994-4c7f-918e-0f2bdb78d9f4", "eventTime": "2019-05-15T11:15:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6478a59-8994-4c7f-918e-0f2bdb78d9f4", "record_id": "flaws_cloudtrail:0000286:b6478a59-8994-4c7f-918e-0f2bdb78d9f4", "row_index": 286, "timestamp": "2019-05-15T11:15:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6478a59-8994-4c7f-918e-0f2bdb78d9f4", "eventTime": "2019-05-15T11:15:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33507-9e92-436c-b3de-269935152bc7", "record_id": "flaws_cloudtrail:0000287:33507-9e92-436c-b3de-269935152bc7", "row_index": 287, "timestamp": "2019-05-15T11:16:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33507-9e92-436c-b3de-269935152bc7", "eventTime": "2019-05-15T11:16:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33507-9e92-436c-b3de-269935152bc7", "record_id": "flaws_cloudtrail:0000288:33507-9e92-436c-b3de-269935152bc7", "row_index": 288, "timestamp": "2019-05-15T11:16:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33507-9e92-436c-b3de-269935152bc7", "eventTime": "2019-05-15T11:16:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60ffc54b-75bd-463f-bb50-11cda7d43db5", "record_id": "flaws_cloudtrail:0000289:60ffc54b-75bd-463f-bb50-11cda7d43db5", "row_index": 289, "timestamp": "2019-05-15T11:16:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60ffc54b-75bd-463f-bb50-11cda7d43db5", "eventTime": "2019-05-15T11:16:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6blJDZWlINEtrcm53dzlrN3llL2oxVkl1THdlbUpwUlkwSW5Xakd6WmpNNmNaUDF2VEQxSUZxajVIZWtjSGdnejY1WWFSRG5LZjFwVHQ5bU1QZDVKVGI3cUR4TlF4dmo0VUF6ZXV3WncrY1N6b0F2OHRPZTRqSWFESzVBaE5Rc2RLeDRzQWp4UmhaUXV6cHVDOERublg4a0t0R2ZkZ2Rlc3JNY1pGczB6SVNqRzVLM2JkSENNUXVSSVBTekpPNnJCYXVjS3VLOC9iUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60ffc54b-75bd-463f-bb50-11cda7d43db5", "record_id": "flaws_cloudtrail:0000290:60ffc54b-75bd-463f-bb50-11cda7d43db5", "row_index": 290, "timestamp": "2019-05-15T11:16:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60ffc54b-75bd-463f-bb50-11cda7d43db5", "eventTime": "2019-05-15T11:16:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6blJDZWlINEtrcm53dzlrN3llL2oxVkl1THdlbUpwUlkwSW5Xakd6WmpNNmNaUDF2VEQxSUZxajVIZWtjSGdnejY1WWFSRG5LZjFwVHQ5bU1QZDVKVGI3cUR4TlF4dmo0VUF6ZXV3WncrY1N6b0F2OHRPZTRqSWFESzVBaE5Rc2RLeDRzQWp4UmhaUXV6cHVDOERublg4a0t0R2ZkZ2Rlc3JNY1pGczB6SVNqRzVLM2JkSENNUXVSSVBTekpPNnJCYXVjS3VLOC9iUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26df4aaa-cbc4-4af9-ad61-1188bd97013", "record_id": "flaws_cloudtrail:0000291:26df4aaa-cbc4-4af9-ad61-1188bd97013", "row_index": 291, "timestamp": "2019-05-15T11:16:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26df4aaa-cbc4-4af9-ad61-1188bd97013", "eventTime": "2019-05-15T11:16:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJadXZYN0hMZjNUOW5CNzlmcmlVUVFGRG1KNEp0UUpVMnN6eFRQSnVDRk9ZSTUzK0dla2laVklEb3ZmdVdFcUdCdjRRL2pmbDduQ082cDY2RWovNUhHcEFQV3M1emNBc3Z4bXhsemtkZEZIeW93Zzg1SEJDZ0hCeFcvNTJUTHNLSm1IVmt0dSs0a3lDRXVJTEYrajYvdzJEcGhUSlplVGFTT3poOW5yOXRRQWtWWlZvSTBBanFreUVBWE9FYk5vTmJ5TFJiWmlmR3h4U3NIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26df4aaa-cbc4-4af9-ad61-1188bd97013", "record_id": "flaws_cloudtrail:0000292:26df4aaa-cbc4-4af9-ad61-1188bd97013", "row_index": 292, "timestamp": "2019-05-15T11:16:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26df4aaa-cbc4-4af9-ad61-1188bd97013", "eventTime": "2019-05-15T11:16:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJadXZYN0hMZjNUOW5CNzlmcmlVUVFGRG1KNEp0UUpVMnN6eFRQSnVDRk9ZSTUzK0dla2laVklEb3ZmdVdFcUdCdjRRL2pmbDduQ082cDY2RWovNUhHcEFQV3M1emNBc3Z4bXhsemtkZEZIeW93Zzg1SEJDZ0hCeFcvNTJUTHNLSm1IVmt0dSs0a3lDRXVJTEYrajYvdzJEcGhUSlplVGFTT3poOW5yOXRRQWtWWlZvSTBBanFreUVBWE9FYk5vTmJ5TFJiWmlmR3h4U3NIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304b4040-3151-44f5-b8c9-1acf9dded174", "record_id": "flaws_cloudtrail:0000293:304b4040-3151-44f5-b8c9-1acf9dded174", "row_index": 293, "timestamp": "2019-05-15T11:16:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304b4040-3151-44f5-b8c9-1acf9dded174", "eventTime": "2019-05-15T11:16:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJORGVQS3I5WmNMMFM1RVRJVEpWUGd3Z1RMSk00bFRYa1NrY2ZPRkhmZEFqNHhwbEtTc3hGbjZraVcrK3ZQc0RWTkZVb0UxdnVleWF0Q0phOWZNbEJMSWFTNXRldEhYUkdNaFczRHUzb3pLbGkrY1c4Y2FTVWlPbjdoNkgrYXI3cEFHekZSYVFSTWFiTkdyN2NQQkJvOEJ1MFVyc0tSM2FJWFVrcGlydDhrVCtXZEw5SDZBWm14TGs5T0hhb3FORVVUN1B4cVhoYWlJVWYrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304b4040-3151-44f5-b8c9-1acf9dded174", "record_id": "flaws_cloudtrail:0000294:304b4040-3151-44f5-b8c9-1acf9dded174", "row_index": 294, "timestamp": "2019-05-15T11:16:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304b4040-3151-44f5-b8c9-1acf9dded174", "eventTime": "2019-05-15T11:16:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJORGVQS3I5WmNMMFM1RVRJVEpWUGd3Z1RMSk00bFRYa1NrY2ZPRkhmZEFqNHhwbEtTc3hGbjZraVcrK3ZQc0RWTkZVb0UxdnVleWF0Q0phOWZNbEJMSWFTNXRldEhYUkdNaFczRHUzb3pLbGkrY1c4Y2FTVWlPbjdoNkgrYXI3cEFHekZSYVFSTWFiTkdyN2NQQkJvOEJ1MFVyc0tSM2FJWFVrcGlydDhrVCtXZEw5SDZBWm14TGs5T0hhb3FORVVUN1B4cVhoYWlJVWYrZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d6ea02-b225-4b66-ae15-30b6ec031a5d", "record_id": "flaws_cloudtrail:0000295:95d6ea02-b225-4b66-ae15-30b6ec031a5d", "row_index": 295, "timestamp": "2019-05-15T11:16:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d6ea02-b225-4b66-ae15-30b6ec031a5d", "eventTime": "2019-05-15T11:16:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGK21IT09GcjJKMXRQVlRQS0dnNDdQR1I5aW5rRFJ5Q3kwK3NqVk8yQ2RnRCtoUG5yaTFZUDkzeW52ck0vVXUwNFozdVQwMmZiZXlweUFtb3g1cWtsNmNMUjBMSVBGcUJsbjJjdDVDc3FkZzQ4YTlJYVlzanBXcEpyTjJnK1puWHdMYXF4Vm1GNjNtVlFKVDFwK0VKTFkzVUFscmE4TmM0bzl0NThRQkRqZ2tQQzU5UFpNKzZCajAzV3ZZaDBDeUFlUXU1Wk93ciIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d6ea02-b225-4b66-ae15-30b6ec031a5d", "record_id": "flaws_cloudtrail:0000296:95d6ea02-b225-4b66-ae15-30b6ec031a5d", "row_index": 296, "timestamp": "2019-05-15T11:16:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d6ea02-b225-4b66-ae15-30b6ec031a5d", "eventTime": "2019-05-15T11:16:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGK21IT09GcjJKMXRQVlRQS0dnNDdQR1I5aW5rRFJ5Q3kwK3NqVk8yQ2RnRCtoUG5yaTFZUDkzeW52ck0vVXUwNFozdVQwMmZiZXlweUFtb3g1cWtsNmNMUjBMSVBGcUJsbjJjdDVDc3FkZzQ4YTlJYVlzanBXcEpyTjJnK1puWHdMYXF4Vm1GNjNtVlFKVDFwK0VKTFkzVUFscmE4TmM0bzl0NThRQkRqZ2tQQzU5UFpNKzZCajAzV3ZZaDBDeUFlUXU1Wk93ciIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd8ae2c-d0cb-47b4-a927-f76b241ae92b", "record_id": "flaws_cloudtrail:0000297:7bd8ae2c-d0cb-47b4-a927-f76b241ae92b", "row_index": 297, "timestamp": "2019-05-15T11:16:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd8ae2c-d0cb-47b4-a927-f76b241ae92b", "eventTime": "2019-05-15T11:16:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPSWFVTmxNMDZIWTNPb0EyUzlkbmhxN3l6MG14THVMUTV1NnVwSXhkN2VoSzcrK0VLZFBWMXI2c1JHTjZvUlV5cnZSYitKdWIrOEIrZy9BUmExRURSTlVSZTdIaHlFSHI1SUpsUzd2OXpmMnRxbUIwNUlXdEZJckkzTUNzcHZ3b29GeTNDUE8yRFlBZ2xrbjMzWjFZOEdsSC9JWHZYOW1FdWY3bDRERkFBMFBQSlU2bEFzVW0zWUJiWFYwbVFnem9vTFRxdmdwZFV1K2RRdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd8ae2c-d0cb-47b4-a927-f76b241ae92b", "record_id": "flaws_cloudtrail:0000298:7bd8ae2c-d0cb-47b4-a927-f76b241ae92b", "row_index": 298, "timestamp": "2019-05-15T11:16:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd8ae2c-d0cb-47b4-a927-f76b241ae92b", "eventTime": "2019-05-15T11:16:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPSWFVTmxNMDZIWTNPb0EyUzlkbmhxN3l6MG14THVMUTV1NnVwSXhkN2VoSzcrK0VLZFBWMXI2c1JHTjZvUlV5cnZSYitKdWIrOEIrZy9BUmExRURSTlVSZTdIaHlFSHI1SUpsUzd2OXpmMnRxbUIwNUlXdEZJckkzTUNzcHZ3b29GeTNDUE8yRFlBZ2xrbjMzWjFZOEdsSC9JWHZYOW1FdWY3bDRERkFBMFBQSlU2bEFzVW0zWUJiWFYwbVFnem9vTFRxdmdwZFV1K2RRdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988ea556-0595-4d3c-933c-20f48a312ac5", "record_id": "flaws_cloudtrail:0000299:988ea556-0595-4d3c-933c-20f48a312ac5", "row_index": 299, "timestamp": "2019-05-15T11:16:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988ea556-0595-4d3c-933c-20f48a312ac5", "eventTime": "2019-05-15T11:16:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrUzJQbkQ3RUsxa2pGY092bkdQa0FZaUc4YlFtTGMvQzBNOHh6V2R0YnpKdFpqcEhRWmNJM3VPRy9YU2l1Q3A0MHd5VjA4ajR5L1lldGExWHNQdU9pc001R2UxZnhFRFpYWTlDZnJPbmdqb0xNTStTR2RsRnJtQ0FlcUJrdzZGeXpNMDJKbk5reW82cGtuVCtnTWhid1NBVFhzREpubHF3Nm1aZEE5R2JFWndzNUdOUE5lTXdvRnNHUE1ubGtKK2JrRnNLakdnRjhVVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988ea556-0595-4d3c-933c-20f48a312ac5", "record_id": "flaws_cloudtrail:0000300:988ea556-0595-4d3c-933c-20f48a312ac5", "row_index": 300, "timestamp": "2019-05-15T11:16:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988ea556-0595-4d3c-933c-20f48a312ac5", "eventTime": "2019-05-15T11:16:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrUzJQbkQ3RUsxa2pGY092bkdQa0FZaUc4YlFtTGMvQzBNOHh6V2R0YnpKdFpqcEhRWmNJM3VPRy9YU2l1Q3A0MHd5VjA4ajR5L1lldGExWHNQdU9pc001R2UxZnhFRFpYWTlDZnJPbmdqb0xNTStTR2RsRnJtQ0FlcUJrdzZGeXpNMDJKbk5reW82cGtuVCtnTWhid1NBVFhzREpubHF3Nm1aZEE5R2JFWndzNUdOUE5lTXdvRnNHUE1ubGtKK2JrRnNLakdnRjhVVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "052c4b75-9267-4a83-aa2f-41d87e3a6e09", "record_id": "flaws_cloudtrail:0000301:052c4b75-9267-4a83-aa2f-41d87e3a6e09", "row_index": 301, "timestamp": "2019-05-15T11:16:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "052c4b75-9267-4a83-aa2f-41d87e3a6e09", "eventTime": "2019-05-15T11:16:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1NloxejFSMzBxVjFlVXRURGlLTHpuekc4b2xPUlVYWThrcUM2akk1SmVnc0p0c3B1ZnZaQlI2bGxDVUZkZzk4d2VSeTZLTi81aFpvTlVKaTJlWTR3dUN0RU8vSnZ3RmNFSkowQksvbTBBMDBvUUUwNjhqcjltc1NERG5aNDZrOWE3NlRrYUlEaXhCR2ZlVkRUOERFV2ZZekpmeDh6Y0lobXlTMmpEQWVMbHk0UnVYZXBnOU1DakY5VFR3QktrSW00UGJIYzJEUDJGRDRiZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "052c4b75-9267-4a83-aa2f-41d87e3a6e09", "record_id": "flaws_cloudtrail:0000302:052c4b75-9267-4a83-aa2f-41d87e3a6e09", "row_index": 302, "timestamp": "2019-05-15T11:16:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "052c4b75-9267-4a83-aa2f-41d87e3a6e09", "eventTime": "2019-05-15T11:16:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1NloxejFSMzBxVjFlVXRURGlLTHpuekc4b2xPUlVYWThrcUM2akk1SmVnc0p0c3B1ZnZaQlI2bGxDVUZkZzk4d2VSeTZLTi81aFpvTlVKaTJlWTR3dUN0RU8vSnZ3RmNFSkowQksvbTBBMDBvUUUwNjhqcjltc1NERG5aNDZrOWE3NlRrYUlEaXhCR2ZlVkRUOERFV2ZZekpmeDh6Y0lobXlTMmpEQWVMbHk0UnVYZXBnOU1DakY5VFR3QktrSW00UGJIYzJEUDJGRDRiZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d55a918-a7ba-4ec3-bbcb-0c28ec44b08c", "record_id": "flaws_cloudtrail:0000303:8d55a918-a7ba-4ec3-bbcb-0c28ec44b08c", "row_index": 303, "timestamp": "2019-05-15T11:16:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d55a918-a7ba-4ec3-bbcb-0c28ec44b08c", "eventTime": "2019-05-15T11:16:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJbkRQWGg5YW1Xc0dGM2VRMVVBbDdlSU04QjZqYjc5WjU0SWZyZm1RclloeHNNT0R6WlBWYmRidXpyRjdBdkpJbGJtTVFhQkw2OFY3bFJDYmNXaU9RaEpvaGNpUDROc0VlRVkzalk2MlVURVZKMGFmL21qYmQyNFY2T0llYXBvTnpCSWVEbkZLSGd2d1JvNkdydkx4UWkvNW9CcHdWbG8xU0wwbzdrb3orTFdnMUUzTG5zK2NsTnNBbGxQR0FHQk1EN2ZSZHkxeHN2WTNLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d55a918-a7ba-4ec3-bbcb-0c28ec44b08c", "record_id": "flaws_cloudtrail:0000304:8d55a918-a7ba-4ec3-bbcb-0c28ec44b08c", "row_index": 304, "timestamp": "2019-05-15T11:16:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d55a918-a7ba-4ec3-bbcb-0c28ec44b08c", "eventTime": "2019-05-15T11:16:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJbkRQWGg5YW1Xc0dGM2VRMVVBbDdlSU04QjZqYjc5WjU0SWZyZm1RclloeHNNT0R6WlBWYmRidXpyRjdBdkpJbGJtTVFhQkw2OFY3bFJDYmNXaU9RaEpvaGNpUDROc0VlRVkzalk2MlVURVZKMGFmL21qYmQyNFY2T0llYXBvTnpCSWVEbkZLSGd2d1JvNkdydkx4UWkvNW9CcHdWbG8xU0wwbzdrb3orTFdnMUUzTG5zK2NsTnNBbGxQR0FHQk1EN2ZSZHkxeHN2WTNLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5960b2-4a65-46b3-9bf5-5de87d56c9d9", "record_id": "flaws_cloudtrail:0000305:8c5960b2-4a65-46b3-9bf5-5de87d56c9d9", "row_index": 305, "timestamp": "2019-05-15T11:16:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5960b2-4a65-46b3-9bf5-5de87d56c9d9", "eventTime": "2019-05-15T11:16:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSZFlnYjNZcW4vUGJIaHpyQkh1aGhOeDdXYVJ0RXVWZithOVovUjdFaTJ5cHAzd2xjMkVCc2xjWkhqSXRYVno1Ris3YXh4MnBDUk04VDllaFp3NnpETlRneFlDSzA3MXFBYUxtZ2c1Z2tKTnBJYzQrN0FHTHQrMndPT3R0V2FvcDhGZHdWeDdCdVVKeDZOa3RuRDU2U24zbU5BVjRlNDhOWE90czN2Z3E4Nm04TlNLR25MQmtmVVdyMExTTnI0aWZ0VnVDTGwxMzBxUFpFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5960b2-4a65-46b3-9bf5-5de87d56c9d9", "record_id": "flaws_cloudtrail:0000306:8c5960b2-4a65-46b3-9bf5-5de87d56c9d9", "row_index": 306, "timestamp": "2019-05-15T11:16:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5960b2-4a65-46b3-9bf5-5de87d56c9d9", "eventTime": "2019-05-15T11:16:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSZFlnYjNZcW4vUGJIaHpyQkh1aGhOeDdXYVJ0RXVWZithOVovUjdFaTJ5cHAzd2xjMkVCc2xjWkhqSXRYVno1Ris3YXh4MnBDUk04VDllaFp3NnpETlRneFlDSzA3MXFBYUxtZ2c1Z2tKTnBJYzQrN0FHTHQrMndPT3R0V2FvcDhGZHdWeDdCdVVKeDZOa3RuRDU2U24zbU5BVjRlNDhOWE90czN2Z3E4Nm04TlNLR25MQmtmVVdyMExTTnI0aWZ0VnVDTGwxMzBxUFpFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "460f2915-9bdd-4e43-810c-1bdd9b0c939e", "record_id": "flaws_cloudtrail:0000307:460f2915-9bdd-4e43-810c-1bdd9b0c939e", "row_index": 307, "timestamp": "2019-05-15T11:16:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "460f2915-9bdd-4e43-810c-1bdd9b0c939e", "eventTime": "2019-05-15T11:16:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtdFpLc3pvWjVrYlV4c3lXR0Qxdnlud2MyblFkRmJxb3NTUVcxRndrTFIrdHpxYWtCNm9IS01WMVNTWE9WNXVKYWR4REduaGxKK09GU2Q1akRHN2w2R0k4Q1dSZmZiSFYrSHc1VFk3N2M1YTMwNWNFNHE5YldyY1hIOE93TCtWNjJnNFd4L0FlMDN1MUJ1eDlKcDVXOUJXV0tDQW15OURYZ09kSVFxTXdOSW1BOG4xYllyR01ZeGI0YVF4a1J4d3NyTTQwQTJNUkxBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "460f2915-9bdd-4e43-810c-1bdd9b0c939e", "record_id": "flaws_cloudtrail:0000308:460f2915-9bdd-4e43-810c-1bdd9b0c939e", "row_index": 308, "timestamp": "2019-05-15T11:16:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "460f2915-9bdd-4e43-810c-1bdd9b0c939e", "eventTime": "2019-05-15T11:16:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtdFpLc3pvWjVrYlV4c3lXR0Qxdnlud2MyblFkRmJxb3NTUVcxRndrTFIrdHpxYWtCNm9IS01WMVNTWE9WNXVKYWR4REduaGxKK09GU2Q1akRHN2w2R0k4Q1dSZmZiSFYrSHc1VFk3N2M1YTMwNWNFNHE5YldyY1hIOE93TCtWNjJnNFd4L0FlMDN1MUJ1eDlKcDVXOUJXV0tDQW15OURYZ09kSVFxTXdOSW1BOG4xYllyR01ZeGI0YVF4a1J4d3NyTTQwQTJNUkxBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a46d5ee-8481-4424-bcda-5bfa083d743a", "record_id": "flaws_cloudtrail:0000309:1a46d5ee-8481-4424-bcda-5bfa083d743a", "row_index": 309, "timestamp": "2019-05-15T11:16:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a46d5ee-8481-4424-bcda-5bfa083d743a", "eventTime": "2019-05-15T11:16:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1MlRVK2F5YzdGTDZVV21xZ0tkbHZXaEhRdE51NnlnaUI5am4yRys5N3BZSUkzVlpOTnUzZ3VSS2R4NXowRm84R2tibFMwOFc2WGFkQlBnMk5qKzlsQVVJb0ZhazZIRGN5UkZSK1M3VVpialJuTUtjUGpvbnA1UTlwdEJ2TkFTWWpSeUQvWGtTTUt3R0orTExhS3M0cGR3TEpHY1ZDOVh1RzRaN3RTVmpLWjAxRk0zSHkxY0JwNzl5UHF3dm9PWm9yYTVQRkZUWkx4cnd3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a46d5ee-8481-4424-bcda-5bfa083d743a", "record_id": "flaws_cloudtrail:0000310:1a46d5ee-8481-4424-bcda-5bfa083d743a", "row_index": 310, "timestamp": "2019-05-15T11:16:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a46d5ee-8481-4424-bcda-5bfa083d743a", "eventTime": "2019-05-15T11:16:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1MlRVK2F5YzdGTDZVV21xZ0tkbHZXaEhRdE51NnlnaUI5am4yRys5N3BZSUkzVlpOTnUzZ3VSS2R4NXowRm84R2tibFMwOFc2WGFkQlBnMk5qKzlsQVVJb0ZhazZIRGN5UkZSK1M3VVpialJuTUtjUGpvbnA1UTlwdEJ2TkFTWWpSeUQvWGtTTUt3R0orTExhS3M0cGR3TEpHY1ZDOVh1RzRaN3RTVmpLWjAxRk0zSHkxY0JwNzl5UHF3dm9PWm9yYTVQRkZUWkx4cnd3dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560813eb-b466-438f-8510-f56e9ace6a2d", "record_id": "flaws_cloudtrail:0000311:560813eb-b466-438f-8510-f56e9ace6a2d", "row_index": 311, "timestamp": "2019-05-15T11:16:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560813eb-b466-438f-8510-f56e9ace6a2d", "eventTime": "2019-05-15T11:16:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCQmpYOVlaMUU0ZmpoQllhYUVGeGFld1UwVUtwWnlDTHFxazBITWxJa0habGR5cmtWMVRlRjlSOUVXc0hjTnNkT0NycHRQbUZXakdraUJ5dWQ3cnZjczBRL01rQVhmSysxR2RVTW8rTlVrQUIvS3FOVldHNUpiNVp6VHpUenJESmlvZ1dmb2VjZmUzK1AwQzVjWm4xUFdtZHNobVVDZ1htZ1pJbnhDYkRMWnV3WXpBUC9mTk1mU2cxMVB1R3A0SG1ZRGc5bTFGLytBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560813eb-b466-438f-8510-f56e9ace6a2d", "record_id": "flaws_cloudtrail:0000312:560813eb-b466-438f-8510-f56e9ace6a2d", "row_index": 312, "timestamp": "2019-05-15T11:16:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560813eb-b466-438f-8510-f56e9ace6a2d", "eventTime": "2019-05-15T11:16:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCQmpYOVlaMUU0ZmpoQllhYUVGeGFld1UwVUtwWnlDTHFxazBITWxJa0habGR5cmtWMVRlRjlSOUVXc0hjTnNkT0NycHRQbUZXakdraUJ5dWQ3cnZjczBRL01rQVhmSysxR2RVTW8rTlVrQUIvS3FOVldHNUpiNVp6VHpUenJESmlvZ1dmb2VjZmUzK1AwQzVjWm4xUFdtZHNobVVDZ1htZ1pJbnhDYkRMWnV3WXpBUC9mTk1mU2cxMVB1R3A0SG1ZRGc5bTFGLytBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8000a493-8509-499e-b5f2-c954fcd9c129", "record_id": "flaws_cloudtrail:0000313:8000a493-8509-499e-b5f2-c954fcd9c129", "row_index": 313, "timestamp": "2019-05-15T11:16:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8000a493-8509-499e-b5f2-c954fcd9c129", "eventTime": "2019-05-15T11:16:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZEF5ZXRJZXJ1Yy83ei9WQWtqOVRxdnJYaTV6elhCQkRuczNJL0t4ZktUUEpOTDZZbnlCOWR3ZjJESmFxb3NBNU81aXFxVzYxakM1TTlvUHowMVlBeXJvTWYwQ1VxRGUyakVOWlI1ZTFCcXZ0eXJRaVh4NE9SbW1mMXR4QzNWT0R4WTdXRHhWa083Tm5NNlFYK2t1V3pVeiszelhadlBHekkvbm0zYko2VTgxUUgyNVNSVXUrZzFZT2JINFdlc3BlUWtLWVpJN0RjUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8000a493-8509-499e-b5f2-c954fcd9c129", "record_id": "flaws_cloudtrail:0000314:8000a493-8509-499e-b5f2-c954fcd9c129", "row_index": 314, "timestamp": "2019-05-15T11:16:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8000a493-8509-499e-b5f2-c954fcd9c129", "eventTime": "2019-05-15T11:16:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYZEF5ZXRJZXJ1Yy83ei9WQWtqOVRxdnJYaTV6elhCQkRuczNJL0t4ZktUUEpOTDZZbnlCOWR3ZjJESmFxb3NBNU81aXFxVzYxakM1TTlvUHowMVlBeXJvTWYwQ1VxRGUyakVOWlI1ZTFCcXZ0eXJRaVh4NE9SbW1mMXR4QzNWT0R4WTdXRHhWa083Tm5NNlFYK2t1V3pVeiszelhadlBHekkvbm0zYko2VTgxUUgyNVNSVXUrZzFZT2JINFdlc3BlUWtLWVpJN0RjUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebd1eea7-acba-4c42-bdb5-b3fd23bde293", "record_id": "flaws_cloudtrail:0000315:ebd1eea7-acba-4c42-bdb5-b3fd23bde293", "row_index": 315, "timestamp": "2019-05-15T11:16:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebd1eea7-acba-4c42-bdb5-b3fd23bde293", "eventTime": "2019-05-15T11:16:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSlVpY3pQRlZLZjczMFZCWFZDd2FjTnJaUjdsRHR4OFlzbGxsclpURHVVNGRLa3hFRTBCMUtvVlhudHJFS3JkMzBTTmU0bFFpazVxZzdJN0ZTZXBmSWRpeFVuekh1Z3U5WUVldHlaa1lMczF4S0xCVVlXakMySzcrNllmWkdSbmNXRSsrelErMGVDY1laMytxWnd5RHVlVW51RDdvTHB4K2dQM1RScnRDdDVlVG1NK2RBd0hoNlZGaUcxY1VhOG55NWN4MkpiNGNSWG5UTkw5dnhkaWhENXpXUzFpZkVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebd1eea7-acba-4c42-bdb5-b3fd23bde293", "record_id": "flaws_cloudtrail:0000316:ebd1eea7-acba-4c42-bdb5-b3fd23bde293", "row_index": 316, "timestamp": "2019-05-15T11:16:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebd1eea7-acba-4c42-bdb5-b3fd23bde293", "eventTime": "2019-05-15T11:16:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYSlVpY3pQRlZLZjczMFZCWFZDd2FjTnJaUjdsRHR4OFlzbGxsclpURHVVNGRLa3hFRTBCMUtvVlhudHJFS3JkMzBTTmU0bFFpazVxZzdJN0ZTZXBmSWRpeFVuekh1Z3U5WUVldHlaa1lMczF4S0xCVVlXakMySzcrNllmWkdSbmNXRSsrelErMGVDY1laMytxWnd5RHVlVW51RDdvTHB4K2dQM1RScnRDdDVlVG1NK2RBd0hoNlZGaUcxY1VhOG55NWN4MkpiNGNSWG5UTkw5dnhkaWhENXpXUzFpZkVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6417edf-320d-43a4-98a5-3939d71a347d", "record_id": "flaws_cloudtrail:0000317:d6417edf-320d-43a4-98a5-3939d71a347d", "row_index": 317, "timestamp": "2019-05-15T11:16:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6417edf-320d-43a4-98a5-3939d71a347d", "eventTime": "2019-05-15T11:16:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkTVI5NWhFNEp1UnU2MVhyWU1nZCt2eE93c2RvNHdFcGJpd01xZGpaRVM3V09UZFhWWGl6M3EyM2JvSnVRbzE2QW4yeGpkYUExd1k4MnRxSlJjUU9qVzBwbGZ6Q3dEbVBnTjZubmJTRFNQNUZQbDlKUVV1REJpWGJXSmI0U3l5Yy82YlBjRFpQRUs3dTY2RnUvVTVscFpLd2VDcm1kb3U1UTlIdXorWTN5Z1Q4dGxWV0haWnBNd2VKZ2F3OUxIbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6417edf-320d-43a4-98a5-3939d71a347d", "record_id": "flaws_cloudtrail:0000318:d6417edf-320d-43a4-98a5-3939d71a347d", "row_index": 318, "timestamp": "2019-05-15T11:16:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6417edf-320d-43a4-98a5-3939d71a347d", "eventTime": "2019-05-15T11:16:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkTVI5NWhFNEp1UnU2MVhyWU1nZCt2eE93c2RvNHdFcGJpd01xZGpaRVM3V09UZFhWWGl6M3EyM2JvSnVRbzE2QW4yeGpkYUExd1k4MnRxSlJjUU9qVzBwbGZ6Q3dEbVBnTjZubmJTRFNQNUZQbDlKUVV1REJpWGJXSmI0U3l5Yy82YlBjRFpQRUs3dTY2RnUvVTVscFpLd2VDcm1kb3U1UTlIdXorWTN5Z1Q4dGxWV0haWnBNd2VKZ2F3OUxIbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b1900fb-40a6-45a9-9b4e-cce38330cf7e", "record_id": "flaws_cloudtrail:0000319:2b1900fb-40a6-45a9-9b4e-cce38330cf7e", "row_index": 319, "timestamp": "2019-05-15T11:16:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b1900fb-40a6-45a9-9b4e-cce38330cf7e", "eventTime": "2019-05-15T11:16:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJES1NObDh6MGNwZUZqZDM0UzVuY0NrcDhYdUo4MTR3VDJyb0RoUlcwcTFsbVp1U29qNllTcUt0NXdNTWNub21sR2ptVWdFVXE5WnZ6R2p0UUpGV0QvSWpKM2xGQWN5NDRHR2dWcENCWkhtR1hWd1VhRFkwVDZiUnAyR0VmQjRmYkRhY1BoZC9MeTl0YS9WclkyTUIzcGVubTZHV3ZkcnpSSDRReHNucVZLQ2E2QWgzaWdtYnIzUVVteVNUN2FwdStZSTFaUG1IQUdnSCs2WmZ6Q3ROY3VzeUU3SVUxN0FvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b1900fb-40a6-45a9-9b4e-cce38330cf7e", "record_id": "flaws_cloudtrail:0000320:2b1900fb-40a6-45a9-9b4e-cce38330cf7e", "row_index": 320, "timestamp": "2019-05-15T11:16:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b1900fb-40a6-45a9-9b4e-cce38330cf7e", "eventTime": "2019-05-15T11:16:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJES1NObDh6MGNwZUZqZDM0UzVuY0NrcDhYdUo4MTR3VDJyb0RoUlcwcTFsbVp1U29qNllTcUt0NXdNTWNub21sR2ptVWdFVXE5WnZ6R2p0UUpGV0QvSWpKM2xGQWN5NDRHR2dWcENCWkhtR1hWd1VhRFkwVDZiUnAyR0VmQjRmYkRhY1BoZC9MeTl0YS9WclkyTUIzcGVubTZHV3ZkcnpSSDRReHNucVZLQ2E2QWgzaWdtYnIzUVVteVNUN2FwdStZSTFaUG1IQUdnSCs2WmZ6Q3ROY3VzeUU3SVUxN0FvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1217d36-e516-4305-8d9e-cf15e6705f78", "record_id": "flaws_cloudtrail:0000321:c1217d36-e516-4305-8d9e-cf15e6705f78", "row_index": 321, "timestamp": "2019-05-15T11:16:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1217d36-e516-4305-8d9e-cf15e6705f78", "eventTime": "2019-05-15T11:16:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZZUdGUGZDVDlXd0Y0OS9nbkNEZFFnSHE0RWpqT3R2VGN0aW9TOUdyYXNVZ3dCdmFYSUppYkdIOXd0NmxvYjVPbGVoUWN2USsyTTcwcWJ3RzJ3QVVDLzFmSnptdU1yeHA3SDZtOFN4amQvZERMMTI1NmZWcDFHQnRMcmlaWlRtazBNK0t0b2c5Z0JybElnMnh3YkQ2SHZ1dVp2ejRUY1hYbDFEK1E5QmJYWFpncjRHZGNCK1c0SjlHbjdwUGtMWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75aee3a7-c234-42cb-a41d-36ea72ef49c9", "record_id": "flaws_cloudtrail:0000322:75aee3a7-c234-42cb-a41d-36ea72ef49c9", "row_index": 322, "timestamp": "2019-05-15T11:16:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75aee3a7-c234-42cb-a41d-36ea72ef49c9", "eventTime": "2019-05-15T11:16:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiTGdNSkdLYjUrYzllam1kWmI1UlA5aGNtRFpCeDZJRDdFd2FXVUhVN2k3V2sxU0NtVFAzTk0rdkJNVlRuTTk3YmxhV2wrZStwb1FvMzJzakpCN3Q3dTE1a3VwUlBzVVJoM2ltYUw3WUVWUGw2VWUxWEZzdk9jNDBFZ0xsOW8wNDRmbEwyeEttMXV6SmVJZGNhYUExZUtoWmRpaVE2ZVhZUGYxNXFpbGtuZXFRWm5iNmo4MHdVc3EvWmdOcTFEVDRDRUVsU3hhdkxNcndsUjJkMFdZeWlkVEFobFlpOWUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1217d36-e516-4305-8d9e-cf15e6705f78", "record_id": "flaws_cloudtrail:0000323:c1217d36-e516-4305-8d9e-cf15e6705f78", "row_index": 323, "timestamp": "2019-05-15T11:16:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1217d36-e516-4305-8d9e-cf15e6705f78", "eventTime": "2019-05-15T11:16:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZZUdGUGZDVDlXd0Y0OS9nbkNEZFFnSHE0RWpqT3R2VGN0aW9TOUdyYXNVZ3dCdmFYSUppYkdIOXd0NmxvYjVPbGVoUWN2USsyTTcwcWJ3RzJ3QVVDLzFmSnptdU1yeHA3SDZtOFN4amQvZERMMTI1NmZWcDFHQnRMcmlaWlRtazBNK0t0b2c5Z0JybElnMnh3YkQ2SHZ1dVp2ejRUY1hYbDFEK1E5QmJYWFpncjRHZGNCK1c0SjlHbjdwUGtMWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75aee3a7-c234-42cb-a41d-36ea72ef49c9", "record_id": "flaws_cloudtrail:0000324:75aee3a7-c234-42cb-a41d-36ea72ef49c9", "row_index": 324, "timestamp": "2019-05-15T11:16:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75aee3a7-c234-42cb-a41d-36ea72ef49c9", "eventTime": "2019-05-15T11:16:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiTGdNSkdLYjUrYzllam1kWmI1UlA5aGNtRFpCeDZJRDdFd2FXVUhVN2k3V2sxU0NtVFAzTk0rdkJNVlRuTTk3YmxhV2wrZStwb1FvMzJzakpCN3Q3dTE1a3VwUlBzVVJoM2ltYUw3WUVWUGw2VWUxWEZzdk9jNDBFZ0xsOW8wNDRmbEwyeEttMXV6SmVJZGNhYUExZUtoWmRpaVE2ZVhZUGYxNXFpbGtuZXFRWm5iNmo4MHdVc3EvWmdOcTFEVDRDRUVsU3hhdkxNcndsUjJkMFdZeWlkVEFobFlpOWUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91be1eb6-2fe0-421e-b1bb-7f994b348043", "record_id": "flaws_cloudtrail:0000325:91be1eb6-2fe0-421e-b1bb-7f994b348043", "row_index": 325, "timestamp": "2019-05-15T11:16:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91be1eb6-2fe0-421e-b1bb-7f994b348043", "eventTime": "2019-05-15T11:16:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2bDdJYURHNlM3OFdTblFubHVjR29iSGJxbXhtYThGcG1sRzNiV3JMTWNUcWpOVXg4YVU5cFdDcUxiVG42eC9FU2VGdVJNZUFpSFpldWs2ZFZyYnFIWG5CUEN6MUFIYk1mekdjaUZjMjF0L0E2UUt5bGM0WlRMcUc4MXBJQ1FRc2xmQlV6ajBZT1Y1eEtHNmlJY0orOEVxd1lBOXFyTFRuWkxPS2VjZzNwMERnR3ROR2Vydk40dEU1YWdpWkYyTitrQnhsak4vaHc4NnNkcW1OVWR4bTNaTGZnSGpMUXFRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91be1eb6-2fe0-421e-b1bb-7f994b348043", "record_id": "flaws_cloudtrail:0000326:91be1eb6-2fe0-421e-b1bb-7f994b348043", "row_index": 326, "timestamp": "2019-05-15T11:16:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91be1eb6-2fe0-421e-b1bb-7f994b348043", "eventTime": "2019-05-15T11:16:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2bDdJYURHNlM3OFdTblFubHVjR29iSGJxbXhtYThGcG1sRzNiV3JMTWNUcWpOVXg4YVU5cFdDcUxiVG42eC9FU2VGdVJNZUFpSFpldWs2ZFZyYnFIWG5CUEN6MUFIYk1mekdjaUZjMjF0L0E2UUt5bGM0WlRMcUc4MXBJQ1FRc2xmQlV6ajBZT1Y1eEtHNmlJY0orOEVxd1lBOXFyTFRuWkxPS2VjZzNwMERnR3ROR2Vydk40dEU1YWdpWkYyTitrQnhsak4vaHc4NnNkcW1OVWR4bTNaTGZnSGpMUXFRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b1ed2a7-259e-4644-bb12-45a81758c66", "record_id": "flaws_cloudtrail:0000327:9b1ed2a7-259e-4644-bb12-45a81758c66", "row_index": 327, "timestamp": "2019-05-15T11:16:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b1ed2a7-259e-4644-bb12-45a81758c66", "eventTime": "2019-05-15T11:16:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNjg2UHVDeTB5ckNEUTRjNk1USmRhWTh3ZUVPVkZRT21mRGhGRkhVTHZWVG5SNFVyR2FNUjhNSTgzTzJ6VDhzOG11R2tGeThvOEs0eFNlZkM2MkJZd2xpTEtqMXVyU3l0YmdVUUtwR2NRckhQZTg3UkZjZDFoT3BLYlEzcWV5S3Yxd2JKZ1VJUG1VVTRMcVRMWkJVT2lkNzV3b3lNRzQ2VlNKWWh1U2dyYkRpUlB4cU5hTlNHK002Q3dlRHErdTY4UDk3WXg2OGI0RU8zQS9RaG5CUktZbzBxakxOOVVrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a37ff1c1-8795-4069-9ebf-31e42fff8ab5", "record_id": "flaws_cloudtrail:0000328:a37ff1c1-8795-4069-9ebf-31e42fff8ab5", "row_index": 328, "timestamp": "2019-05-15T11:16:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a37ff1c1-8795-4069-9ebf-31e42fff8ab5", "eventTime": "2019-05-15T11:16:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMY1pLTHJDRlJEZXpWOWpzMFZWS1Fmc3E1UlluUDVzYUw4bkdmTUoxYUVSNlRMWHE5TUE0RkNCYjVTdlpWK0ZCbGg3OTFSd09XM0cwYWEwamZSMlJaQkkxMTJ3Njl1MGUxRXNhbitKclFuMzhKL29iVjk5VHJQMno3TzNwbjU2Q25wakplcjEzVGR6Um9jMnF6RzVzc1lkcmpyb0tJMkJJMm9tb2M1OXVWR1RqUmpmbS9WaHFZd0ZYczI3Rm5hRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b1ed2a7-259e-4644-bb12-45a81758c66", "record_id": "flaws_cloudtrail:0000329:9b1ed2a7-259e-4644-bb12-45a81758c66", "row_index": 329, "timestamp": "2019-05-15T11:16:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b1ed2a7-259e-4644-bb12-45a81758c66", "eventTime": "2019-05-15T11:16:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNjg2UHVDeTB5ckNEUTRjNk1USmRhWTh3ZUVPVkZRT21mRGhGRkhVTHZWVG5SNFVyR2FNUjhNSTgzTzJ6VDhzOG11R2tGeThvOEs0eFNlZkM2MkJZd2xpTEtqMXVyU3l0YmdVUUtwR2NRckhQZTg3UkZjZDFoT3BLYlEzcWV5S3Yxd2JKZ1VJUG1VVTRMcVRMWkJVT2lkNzV3b3lNRzQ2VlNKWWh1U2dyYkRpUlB4cU5hTlNHK002Q3dlRHErdTY4UDk3WXg2OGI0RU8zQS9RaG5CUktZbzBxakxOOVVrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a37ff1c1-8795-4069-9ebf-31e42fff8ab5", "record_id": "flaws_cloudtrail:0000330:a37ff1c1-8795-4069-9ebf-31e42fff8ab5", "row_index": 330, "timestamp": "2019-05-15T11:16:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a37ff1c1-8795-4069-9ebf-31e42fff8ab5", "eventTime": "2019-05-15T11:16:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMY1pLTHJDRlJEZXpWOWpzMFZWS1Fmc3E1UlluUDVzYUw4bkdmTUoxYUVSNlRMWHE5TUE0RkNCYjVTdlpWK0ZCbGg3OTFSd09XM0cwYWEwamZSMlJaQkkxMTJ3Njl1MGUxRXNhbitKclFuMzhKL29iVjk5VHJQMno3TzNwbjU2Q25wakplcjEzVGR6Um9jMnF6RzVzc1lkcmpyb0tJMkJJMm9tb2M1OXVWR1RqUmpmbS9WaHFZd0ZYczI3Rm5hRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd17729-f3c0-46b2-b656-0e9528ff4a85", "record_id": "flaws_cloudtrail:0000331:cd17729-f3c0-46b2-b656-0e9528ff4a85", "row_index": 331, "timestamp": "2019-05-15T11:16:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd17729-f3c0-46b2-b656-0e9528ff4a85", "eventTime": "2019-05-15T11:16:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Sjgxdm85STFKSkdGcGZQdkRlcnVrNkZFalI0bTVobnJvYzdtd2xpUXB5Y0ZqV2ZPd0dZZmI2Tjk1d0N5M3FVcmIvQU5aNWlLdzhBbDE3Ulpza0lPTlR4NVFWVW4vZGduRXhPRlErdm13MmE5MWxmejdlekUvSC9oQVZmU0EwNG9yVFR1b3BTS1luZnZyaVFTdk5uSWZQalpZV1huWHRQaUdUaGppckloUkpMMHhoT3NWM0pRN1BOaEh1bGFWdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd17729-f3c0-46b2-b656-0e9528ff4a85", "record_id": "flaws_cloudtrail:0000332:cd17729-f3c0-46b2-b656-0e9528ff4a85", "row_index": 332, "timestamp": "2019-05-15T11:16:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd17729-f3c0-46b2-b656-0e9528ff4a85", "eventTime": "2019-05-15T11:16:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Sjgxdm85STFKSkdGcGZQdkRlcnVrNkZFalI0bTVobnJvYzdtd2xpUXB5Y0ZqV2ZPd0dZZmI2Tjk1d0N5M3FVcmIvQU5aNWlLdzhBbDE3Ulpza0lPTlR4NVFWVW4vZGduRXhPRlErdm13MmE5MWxmejdlekUvSC9oQVZmU0EwNG9yVFR1b3BTS1luZnZyaVFTdk5uSWZQalpZV1huWHRQaUdUaGppckloUkpMMHhoT3NWM0pRN1BOaEh1bGFWdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb25f4ae-9583-48b5-aaee-17fe172fe063", "record_id": "flaws_cloudtrail:0000333:fb25f4ae-9583-48b5-aaee-17fe172fe063", "row_index": 333, "timestamp": "2019-05-15T11:18:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb25f4ae-9583-48b5-aaee-17fe172fe063", "eventTime": "2019-05-15T11:18:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb25f4ae-9583-48b5-aaee-17fe172fe063", "record_id": "flaws_cloudtrail:0000334:fb25f4ae-9583-48b5-aaee-17fe172fe063", "row_index": 334, "timestamp": "2019-05-15T11:18:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb25f4ae-9583-48b5-aaee-17fe172fe063", "eventTime": "2019-05-15T11:18:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee03746-5db7-437d-85de-c2ee731be5a5", "record_id": "flaws_cloudtrail:0000335:cee03746-5db7-437d-85de-c2ee731be5a5", "row_index": 335, "timestamp": "2019-05-15T11:19:37Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee03746-5db7-437d-85de-c2ee731be5a5", "eventTime": "2019-05-15T11:19:37Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee03746-5db7-437d-85de-c2ee731be5a5", "record_id": "flaws_cloudtrail:0000336:cee03746-5db7-437d-85de-c2ee731be5a5", "row_index": 336, "timestamp": "2019-05-15T11:19:37Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee03746-5db7-437d-85de-c2ee731be5a5", "eventTime": "2019-05-15T11:19:37Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b686445-de15-424c-9641-2217cd5d6a22", "record_id": "flaws_cloudtrail:0000337:b686445-de15-424c-9641-2217cd5d6a22", "row_index": 337, "timestamp": "2019-05-15T11:21:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b686445-de15-424c-9641-2217cd5d6a22", "eventTime": "2019-05-15T11:21:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b686445-de15-424c-9641-2217cd5d6a22", "record_id": "flaws_cloudtrail:0000338:b686445-de15-424c-9641-2217cd5d6a22", "row_index": 338, "timestamp": "2019-05-15T11:21:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b686445-de15-424c-9641-2217cd5d6a22", "eventTime": "2019-05-15T11:21:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ced9666-9ae5-4b22-a429-ceee8a8b0cdd", "record_id": "flaws_cloudtrail:0000339:0ced9666-9ae5-4b22-a429-ceee8a8b0cdd", "row_index": 339, "timestamp": "2019-05-15T11:21:05Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ced9666-9ae5-4b22-a429-ceee8a8b0cdd", "eventTime": "2019-05-15T11:21:05Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ced9666-9ae5-4b22-a429-ceee8a8b0cdd", "record_id": "flaws_cloudtrail:0000340:0ced9666-9ae5-4b22-a429-ceee8a8b0cdd", "row_index": 340, "timestamp": "2019-05-15T11:21:05Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ced9666-9ae5-4b22-a429-ceee8a8b0cdd", "eventTime": "2019-05-15T11:21:05Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3411c3e4-ca07-4c8c-98f4-b45ab6cbac22", "record_id": "flaws_cloudtrail:0000341:3411c3e4-ca07-4c8c-98f4-b45ab6cbac22", "row_index": 341, "timestamp": "2019-05-15T11:21:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3411c3e4-ca07-4c8c-98f4-b45ab6cbac22", "eventTime": "2019-05-15T11:21:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDZkVPT3FGcyt1Vm5JRDBXYlRwa1BRcGVqUURPcEM3d0tYc2l0M01nTmh5dmpWYWJDM1hlSE9XUXBSc1NBdXVUYjd3QjArTXpJTllYREdYeG9sazZNRHZoQnpEM0hYR1ptbmJKclZ1Y04rcEJrZ3pVR1I2b0tRVUtOaHVuZm1EcDdObit6TXhBakZoVnhvdlhob05iS2dIOGR1dFVNeFRGcXd3UlliaDE4dHhEYUZCQ2kzb3hoV0hWeldZYWNDZ1R3bXV3UGVaNDZNMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3411c3e4-ca07-4c8c-98f4-b45ab6cbac22", "record_id": "flaws_cloudtrail:0000342:3411c3e4-ca07-4c8c-98f4-b45ab6cbac22", "row_index": 342, "timestamp": "2019-05-15T11:21:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3411c3e4-ca07-4c8c-98f4-b45ab6cbac22", "eventTime": "2019-05-15T11:21:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDZkVPT3FGcyt1Vm5JRDBXYlRwa1BRcGVqUURPcEM3d0tYc2l0M01nTmh5dmpWYWJDM1hlSE9XUXBSc1NBdXVUYjd3QjArTXpJTllYREdYeG9sazZNRHZoQnpEM0hYR1ptbmJKclZ1Y04rcEJrZ3pVR1I2b0tRVUtOaHVuZm1EcDdObit6TXhBakZoVnhvdlhob05iS2dIOGR1dFVNeFRGcXd3UlliaDE4dHhEYUZCQ2kzb3hoV0hWeldZYWNDZ1R3bXV3UGVaNDZNMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25dff3f5-eaf7-4604-8c29-eff3b6fb6e2a", "record_id": "flaws_cloudtrail:0000343:25dff3f5-eaf7-4604-8c29-eff3b6fb6e2a", "row_index": 343, "timestamp": "2019-05-15T11:21:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25dff3f5-eaf7-4604-8c29-eff3b6fb6e2a", "eventTime": "2019-05-15T11:21:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSUUFHVEFLWEw3TEFIaURkM0ZWeUR5YWJZVnBkUzNLaTNwTjJWZkpaQTQ5ZDE5YllzT2lXbmhhMnZTSmlXazJVb0FVQ2VKenlXanRtTnppaUxiNHMxZElHT1BSRW93NXhaZ0ZiQUxlL0pIa201WVZ3bFBVUlV0dTdPSDV1dk95Mm1GdTcxQzMvNnp6Y0dxQTlxQzE1NHJFVXE3bHlhZms1YS80SkpHRlBkQVBWdTJndjVneE5BdFRoMTVSL01QREtLWmFUQUh0K3p6Ni81UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25dff3f5-eaf7-4604-8c29-eff3b6fb6e2a", "record_id": "flaws_cloudtrail:0000344:25dff3f5-eaf7-4604-8c29-eff3b6fb6e2a", "row_index": 344, "timestamp": "2019-05-15T11:21:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25dff3f5-eaf7-4604-8c29-eff3b6fb6e2a", "eventTime": "2019-05-15T11:21:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSUUFHVEFLWEw3TEFIaURkM0ZWeUR5YWJZVnBkUzNLaTNwTjJWZkpaQTQ5ZDE5YllzT2lXbmhhMnZTSmlXazJVb0FVQ2VKenlXanRtTnppaUxiNHMxZElHT1BSRW93NXhaZ0ZiQUxlL0pIa201WVZ3bFBVUlV0dTdPSDV1dk95Mm1GdTcxQzMvNnp6Y0dxQTlxQzE1NHJFVXE3bHlhZms1YS80SkpHRlBkQVBWdTJndjVneE5BdFRoMTVSL01QREtLWmFUQUh0K3p6Ni81UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6233d80-33cd-43e6-aa33-6a099ea32acf", "record_id": "flaws_cloudtrail:0000345:a6233d80-33cd-43e6-aa33-6a099ea32acf", "row_index": 345, "timestamp": "2019-05-15T11:21:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6233d80-33cd-43e6-aa33-6a099ea32acf", "eventTime": "2019-05-15T11:21:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpODJBNGgxZkUvWnlya25NNnZhdDNTTTJWTEtHNTF6U0VJdjcxZGJQaW5zSjBmcTVMQ25VNEhITkNNdTVRbDNVZHRwQysyVmFGaG12bU9vNm1GWmZQZEFsOFcyOVBidzEvZmdKWk5yWW5OTFViMjdyQmNCUHZlMWZCVnY3UHV1YzBRVjVlT0ZEMkNIdWlyR0o3a3VYMnNjNzgwMTF1bGNNNG9SUFVFeEpleityWUpyRkxIR2V4RkZDRzBNdlAzZGtKcVBreGRvMVRYSzYzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6233d80-33cd-43e6-aa33-6a099ea32acf", "record_id": "flaws_cloudtrail:0000346:a6233d80-33cd-43e6-aa33-6a099ea32acf", "row_index": 346, "timestamp": "2019-05-15T11:21:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6233d80-33cd-43e6-aa33-6a099ea32acf", "eventTime": "2019-05-15T11:21:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpODJBNGgxZkUvWnlya25NNnZhdDNTTTJWTEtHNTF6U0VJdjcxZGJQaW5zSjBmcTVMQ25VNEhITkNNdTVRbDNVZHRwQysyVmFGaG12bU9vNm1GWmZQZEFsOFcyOVBidzEvZmdKWk5yWW5OTFViMjdyQmNCUHZlMWZCVnY3UHV1YzBRVjVlT0ZEMkNIdWlyR0o3a3VYMnNjNzgwMTF1bGNNNG9SUFVFeEpleityWUpyRkxIR2V4RkZDRzBNdlAzZGtKcVBreGRvMVRYSzYzUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e61c394-7acc-496a-b714-e2fe710a0d6a", "record_id": "flaws_cloudtrail:0000347:3e61c394-7acc-496a-b714-e2fe710a0d6a", "row_index": 347, "timestamp": "2019-05-15T11:21:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e61c394-7acc-496a-b714-e2fe710a0d6a", "eventTime": "2019-05-15T11:21:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNy9IckhGVTdWeXlENHpBWHV6cVFtN1UxeHhBclVscEdlLzUrck81RloyTGJ5YnR1Y1NYNXVjVUpvQi9GckJ4M3VnZ2hSeWtZNEJJdGNXNzducnhlSmsrNXpIdDVZanZPQjFxS3k1T215cEZYRUQ1WDhabE02M0JNTi9ZY21HbXU5NWg4eHIxR3k1WUJiVUNKcko2bEZHV3hLQ3NEamdqU056d0dpZVV1UnhhbUJyYVptYUk5bG9Pdjd6QVVuRFl6eHZCNzE5SSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e61c394-7acc-496a-b714-e2fe710a0d6a", "record_id": "flaws_cloudtrail:0000348:3e61c394-7acc-496a-b714-e2fe710a0d6a", "row_index": 348, "timestamp": "2019-05-15T11:21:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e61c394-7acc-496a-b714-e2fe710a0d6a", "eventTime": "2019-05-15T11:21:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNy9IckhGVTdWeXlENHpBWHV6cVFtN1UxeHhBclVscEdlLzUrck81RloyTGJ5YnR1Y1NYNXVjVUpvQi9GckJ4M3VnZ2hSeWtZNEJJdGNXNzducnhlSmsrNXpIdDVZanZPQjFxS3k1T215cEZYRUQ1WDhabE02M0JNTi9ZY21HbXU5NWg4eHIxR3k1WUJiVUNKcko2bEZHV3hLQ3NEamdqU056d0dpZVV1UnhhbUJyYVptYUk5bG9Pdjd6QVVuRFl6eHZCNzE5SSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b20806a-66aa-4f74-86dc-4ea05dc5c6ba", "record_id": "flaws_cloudtrail:0000349:0b20806a-66aa-4f74-86dc-4ea05dc5c6ba", "row_index": 349, "timestamp": "2019-05-15T11:21:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b20806a-66aa-4f74-86dc-4ea05dc5c6ba", "eventTime": "2019-05-15T11:21:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyQVNQNWtpN2xUUTY0NDBCeEJmMnRsNnBVeUtoUmM0VC9WVVBlNFJiRzYxREVNVjVNeTZHU3cxcjc3YXVpZUxybG9RakVGWGMzMnZrWnNjT0c3bmk2Z1l1a3RuVXZZZHJVYnV1VVNyWUVUYklSaXlseTBBWGwzYThCd1F2TW9CVTdIRlVveXFkWFl2cHRGNkdpNG9ibWgyUC9jMmIyU0pWWVQ4eU16Tzc5cEMzczZvRFpoNm5jVEwwZ0p0WkJKRzl2SU0wa2FPcllCNGhpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b20806a-66aa-4f74-86dc-4ea05dc5c6ba", "record_id": "flaws_cloudtrail:0000350:0b20806a-66aa-4f74-86dc-4ea05dc5c6ba", "row_index": 350, "timestamp": "2019-05-15T11:21:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b20806a-66aa-4f74-86dc-4ea05dc5c6ba", "eventTime": "2019-05-15T11:21:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyQVNQNWtpN2xUUTY0NDBCeEJmMnRsNnBVeUtoUmM0VC9WVVBlNFJiRzYxREVNVjVNeTZHU3cxcjc3YXVpZUxybG9RakVGWGMzMnZrWnNjT0c3bmk2Z1l1a3RuVXZZZHJVYnV1VVNyWUVUYklSaXlseTBBWGwzYThCd1F2TW9CVTdIRlVveXFkWFl2cHRGNkdpNG9ibWgyUC9jMmIyU0pWWVQ4eU16Tzc5cEMzczZvRFpoNm5jVEwwZ0p0WkJKRzl2SU0wa2FPcllCNGhpZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c2a64c8-e9ed-4e98-b8f3-3faa0b8931cd", "record_id": "flaws_cloudtrail:0000351:2c2a64c8-e9ed-4e98-b8f3-3faa0b8931cd", "row_index": 351, "timestamp": "2019-05-15T11:21:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c2a64c8-e9ed-4e98-b8f3-3faa0b8931cd", "eventTime": "2019-05-15T11:21:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJQnBEVnVXNTBwS3hiOFcyQU9ERG9qS3A4c3dSV0dNQVBHakE2ZEJESDhlRi9zaDdFbnd2RXVOa2o3VUhyV3IrbWdUVzdtaEl6YjZEQU9YMGkvaDU3byt3YVd3WlZDQnB0MkFRNXF5dlhyY2lUM0lZSitvQlg3RHhFc041UUxzR0RCcFhiTVV6QzJ5Z09DRDhOTDIzSXZFcE1CTVBlNHBtNkQ4N1RuU042UXR1VkhCWGpoY1pKcUtuRWtzR3RwZkV3dCtodTdtbiswbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c2a64c8-e9ed-4e98-b8f3-3faa0b8931cd", "record_id": "flaws_cloudtrail:0000352:2c2a64c8-e9ed-4e98-b8f3-3faa0b8931cd", "row_index": 352, "timestamp": "2019-05-15T11:21:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c2a64c8-e9ed-4e98-b8f3-3faa0b8931cd", "eventTime": "2019-05-15T11:21:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJQnBEVnVXNTBwS3hiOFcyQU9ERG9qS3A4c3dSV0dNQVBHakE2ZEJESDhlRi9zaDdFbnd2RXVOa2o3VUhyV3IrbWdUVzdtaEl6YjZEQU9YMGkvaDU3byt3YVd3WlZDQnB0MkFRNXF5dlhyY2lUM0lZSitvQlg3RHhFc041UUxzR0RCcFhiTVV6QzJ5Z09DRDhOTDIzSXZFcE1CTVBlNHBtNkQ4N1RuU042UXR1VkhCWGpoY1pKcUtuRWtzR3RwZkV3dCtodTdtbiswbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33cfbf5-3b23-44a5-aa60-1a1c5394c6b9", "record_id": "flaws_cloudtrail:0000353:d33cfbf5-3b23-44a5-aa60-1a1c5394c6b9", "row_index": 353, "timestamp": "2019-05-15T11:21:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33cfbf5-3b23-44a5-aa60-1a1c5394c6b9", "eventTime": "2019-05-15T11:21:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtM0FiaHJwbC81YjRsWnIzeEpvcE1PVU1TNW9DbldiYTgyRjlrK2d2NktTS3dHbWhoNXc0S2dVV1lhQnBMc0gzekV6eFkyZjBQMkdwK0h6T0JURGs2d0JNdjg0MjlKVGRqcXFJWmtRNXZ3ZXRvTEZPY0pjdnJWOUFNK3VRR1REaDQvUG9TRERBQjZRdldTaHZpeTgzVE50c3VkdWtkaStKeGM0Tkd6dDA5enBTanB3V0FNT3EydnJzTHRWbzhWZFNKRWlqcWdzc2x4M1pIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d33cfbf5-3b23-44a5-aa60-1a1c5394c6b9", "record_id": "flaws_cloudtrail:0000354:d33cfbf5-3b23-44a5-aa60-1a1c5394c6b9", "row_index": 354, "timestamp": "2019-05-15T11:21:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d33cfbf5-3b23-44a5-aa60-1a1c5394c6b9", "eventTime": "2019-05-15T11:21:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtM0FiaHJwbC81YjRsWnIzeEpvcE1PVU1TNW9DbldiYTgyRjlrK2d2NktTS3dHbWhoNXc0S2dVV1lhQnBMc0gzekV6eFkyZjBQMkdwK0h6T0JURGs2d0JNdjg0MjlKVGRqcXFJWmtRNXZ3ZXRvTEZPY0pjdnJWOUFNK3VRR1REaDQvUG9TRERBQjZRdldTaHZpeTgzVE50c3VkdWtkaStKeGM0Tkd6dDA5enBTanB3V0FNT3EydnJzTHRWbzhWZFNKRWlqcWdzc2x4M1pIdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd9a9000-9154-450c-9d12-507ae2647ecd", "record_id": "flaws_cloudtrail:0000355:cd9a9000-9154-450c-9d12-507ae2647ecd", "row_index": 355, "timestamp": "2019-05-15T11:21:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd9a9000-9154-450c-9d12-507ae2647ecd", "eventTime": "2019-05-15T11:21:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWeUpEWFRYVnVUbVBkSndtanl2OTlpdWNXTW5iN1MrbmM1TTVxWjQ0U291Q29ZdStMdG1OVUIrdVV0VkMxQzBGcGpqZEtKejhLZHYvbmp1dDJkSHhnNnZFY3RWY3RHTUhvWlJCV0tmenRvb0JaTStRMVBmRXk3Y0I3U1pkSlp5cDhWTkRKYit0bW9sdnQ1N0thdWQ1cVR4QWFyRGxlRFRndTFGNjVaaW9mdER5Y0NDMHlPZlRvU0htdHcxVlBWRFBxVkZoQTV5MWI5aTNWZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd9a9000-9154-450c-9d12-507ae2647ecd", "record_id": "flaws_cloudtrail:0000356:cd9a9000-9154-450c-9d12-507ae2647ecd", "row_index": 356, "timestamp": "2019-05-15T11:21:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd9a9000-9154-450c-9d12-507ae2647ecd", "eventTime": "2019-05-15T11:21:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWeUpEWFRYVnVUbVBkSndtanl2OTlpdWNXTW5iN1MrbmM1TTVxWjQ0U291Q29ZdStMdG1OVUIrdVV0VkMxQzBGcGpqZEtKejhLZHYvbmp1dDJkSHhnNnZFY3RWY3RHTUhvWlJCV0tmenRvb0JaTStRMVBmRXk3Y0I3U1pkSlp5cDhWTkRKYit0bW9sdnQ1N0thdWQ1cVR4QWFyRGxlRFRndTFGNjVaaW9mdER5Y0NDMHlPZlRvU0htdHcxVlBWRFBxVkZoQTV5MWI5aTNWZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa05676-1256-4a00-bfb5-b7f3a3b629b0", "record_id": "flaws_cloudtrail:0000357:cfa05676-1256-4a00-bfb5-b7f3a3b629b0", "row_index": 357, "timestamp": "2019-05-15T11:21:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa05676-1256-4a00-bfb5-b7f3a3b629b0", "eventTime": "2019-05-15T11:21:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTVG1HUzZGbllCcTY3bDBQNWVScGNsRUMrZ1JmSzZaWjBlZTZjbERvdjhORnFZdmdiUlQ3eG14STBDdG9JdGNTYUlaL25MQldPb1BRWE9oamIwWjVDOEZKVVhVSUVONTR3eG5pdzB0aWVWMlZoNjI4SVdHVk5FeUxWdlduY1RVdTNsV1ozc2R4bGJvcHNWRS9OYzcxMHVvR1MwWTdMc1dkWk1zcFZkU2xFUmNTZTJ3aFh5TlA3OU43VnFxOGptVTBYRlVySDhiK25kWS9nQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa05676-1256-4a00-bfb5-b7f3a3b629b0", "record_id": "flaws_cloudtrail:0000358:cfa05676-1256-4a00-bfb5-b7f3a3b629b0", "row_index": 358, "timestamp": "2019-05-15T11:21:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa05676-1256-4a00-bfb5-b7f3a3b629b0", "eventTime": "2019-05-15T11:21:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTVG1HUzZGbllCcTY3bDBQNWVScGNsRUMrZ1JmSzZaWjBlZTZjbERvdjhORnFZdmdiUlQ3eG14STBDdG9JdGNTYUlaL25MQldPb1BRWE9oamIwWjVDOEZKVVhVSUVONTR3eG5pdzB0aWVWMlZoNjI4SVdHVk5FeUxWdlduY1RVdTNsV1ozc2R4bGJvcHNWRS9OYzcxMHVvR1MwWTdMc1dkWk1zcFZkU2xFUmNTZTJ3aFh5TlA3OU43VnFxOGptVTBYRlVySDhiK25kWS9nQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a4e62a-4401-41ea-afb0-81005aaf8d39", "record_id": "flaws_cloudtrail:0000359:84a4e62a-4401-41ea-afb0-81005aaf8d39", "row_index": 359, "timestamp": "2019-05-15T11:21:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a4e62a-4401-41ea-afb0-81005aaf8d39", "eventTime": "2019-05-15T11:21:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpOWUrbDg1Z3V1SVFFNkM0QUQxSXRldlNxd25uTE5WMjBZN1B2UDhGSmVXUzZHRFNkNldYVW11TS95aTNyVHJTT0RxWVhiSE5sOW8vWnJ0eDZWcWU2MWxjMldXL3RHSU1rV0RFSmMrcEdrV0EvTy85Vm5rWHdyZFg2S1k3SmhnckQ0TWluWlc3TzEwZmJTY1VNNy9IYS85T0wwLzVRaGtZdFBmMzRvTGtlN0FlaUNCeWoza01MT0MxL0RTaCtCM1BDenZFdk9BSm1nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a4e62a-4401-41ea-afb0-81005aaf8d39", "record_id": "flaws_cloudtrail:0000360:84a4e62a-4401-41ea-afb0-81005aaf8d39", "row_index": 360, "timestamp": "2019-05-15T11:21:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a4e62a-4401-41ea-afb0-81005aaf8d39", "eventTime": "2019-05-15T11:21:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpOWUrbDg1Z3V1SVFFNkM0QUQxSXRldlNxd25uTE5WMjBZN1B2UDhGSmVXUzZHRFNkNldYVW11TS95aTNyVHJTT0RxWVhiSE5sOW8vWnJ0eDZWcWU2MWxjMldXL3RHSU1rV0RFSmMrcEdrV0EvTy85Vm5rWHdyZFg2S1k3SmhnckQ0TWluWlc3TzEwZmJTY1VNNy9IYS85T0wwLzVRaGtZdFBmMzRvTGtlN0FlaUNCeWoza01MT0MxL0RTaCtCM1BDenZFdk9BSm1nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fcff5e4-45f7-402d-baa0-ca21b498255b9", "record_id": "flaws_cloudtrail:0000361:0fcff5e4-45f7-402d-baa0-ca21b498255b9", "row_index": 361, "timestamp": "2019-05-15T11:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fcff5e4-45f7-402d-baa0-ca21b498255b9", "eventTime": "2019-05-15T11:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWN0tnOTdzMnpvUUk2Tk1pZFk4cEMyd3k4UVN2V0RvbGlyTWFDcmhKNzBIblRiaXRrM0ZtaHpZWDdNZ0VRU1dCSkZzTitqTEJGV1p5VmhUUmRFb245SXYxd0lIcUQ3aWtNMEZzRmZWN1dsOWxMY05XaTdFSW1sNGRXSjdUUVl0VmlGY2RIY3NTc3NpV0ErbTF3VFd5NUZob0oyV1FQL1BmamdyS2VRaG5pN1ZrRndYMlhoS0V1dVRUL1B0RDNCcmZsazVTQm9FTFB6cDNidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fcff5e4-45f7-402d-baa0-ca21b498255b9", "record_id": "flaws_cloudtrail:0000362:0fcff5e4-45f7-402d-baa0-ca21b498255b9", "row_index": 362, "timestamp": "2019-05-15T11:21:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fcff5e4-45f7-402d-baa0-ca21b498255b9", "eventTime": "2019-05-15T11:21:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWN0tnOTdzMnpvUUk2Tk1pZFk4cEMyd3k4UVN2V0RvbGlyTWFDcmhKNzBIblRiaXRrM0ZtaHpZWDdNZ0VRU1dCSkZzTitqTEJGV1p5VmhUUmRFb245SXYxd0lIcUQ3aWtNMEZzRmZWN1dsOWxMY05XaTdFSW1sNGRXSjdUUVl0VmlGY2RIY3NTc3NpV0ErbTF3VFd5NUZob0oyV1FQL1BmamdyS2VRaG5pN1ZrRndYMlhoS0V1dVRUL1B0RDNCcmZsazVTQm9FTFB6cDNidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0111c7c0-8e93-4009-afad-ed5855335193", "record_id": "flaws_cloudtrail:0000363:0111c7c0-8e93-4009-afad-ed5855335193", "row_index": 363, "timestamp": "2019-05-15T11:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0111c7c0-8e93-4009-afad-ed5855335193", "eventTime": "2019-05-15T11:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYR0NidmZnS3pscUlPMzlJNDQ0d240aXd3S0RYeDNPWXJhZ3gyOTJKTkM2cmFoZ0p2bmRhdXpXSmxPTWpvdThGaW92R2JVZDZCRG56NGJqZE90WU94ZEpQYjNUL01rdEhuZFRDMVBaQzloNzBCc2JGVHZBUzBXdCtwZDZWWmduVDJYMm1lRmViOVNiTms3a1hnQklNQjgyVHgrTzkxb3FsbzU1S0dSOVk1bGtyN29HNEJFeExLdE1sczNLN3JUajJTTlRKSmNYRmRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0111c7c0-8e93-4009-afad-ed5855335193", "record_id": "flaws_cloudtrail:0000364:0111c7c0-8e93-4009-afad-ed5855335193", "row_index": 364, "timestamp": "2019-05-15T11:21:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0111c7c0-8e93-4009-afad-ed5855335193", "eventTime": "2019-05-15T11:21:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYR0NidmZnS3pscUlPMzlJNDQ0d240aXd3S0RYeDNPWXJhZ3gyOTJKTkM2cmFoZ0p2bmRhdXpXSmxPTWpvdThGaW92R2JVZDZCRG56NGJqZE90WU94ZEpQYjNUL01rdEhuZFRDMVBaQzloNzBCc2JGVHZBUzBXdCtwZDZWWmduVDJYMm1lRmViOVNiTms3a1hnQklNQjgyVHgrTzkxb3FsbzU1S0dSOVk1bGtyN29HNEJFeExLdE1sczNLN3JUajJTTlRKSmNYRmRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f26c12c-a4c8-4144-b47e-b15b82193b40", "record_id": "flaws_cloudtrail:0000365:5f26c12c-a4c8-4144-b47e-b15b82193b40", "row_index": 365, "timestamp": "2019-05-15T11:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f26c12c-a4c8-4144-b47e-b15b82193b40", "eventTime": "2019-05-15T11:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKVDZ4dkhRcEZYdHJhamZqdXVMTWwxUUtkdTVKZjAyREpRUFRXYWFKZElKRm81TUhxdnNUd0d3Rk04NnpGNytJZjE0RlcyQUFtQi9sU1p0WGlsdU5BVmxFbHU2ODVhVTRPV0p1MGU0ZkNEVTUzNHJQVWV2M1BoVkttTXl5TytHS2ttb0U2ZWgzNmR0NGxGbzBLRE1Ec1hDYXRBZHRVVkJIbFVrUVFUKzdRRkRXLzNQMnl6ZHc4Y0tNMUE3WktzMkhNVWFyczJxa0JLYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f26c12c-a4c8-4144-b47e-b15b82193b40", "record_id": "flaws_cloudtrail:0000366:5f26c12c-a4c8-4144-b47e-b15b82193b40", "row_index": 366, "timestamp": "2019-05-15T11:21:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f26c12c-a4c8-4144-b47e-b15b82193b40", "eventTime": "2019-05-15T11:21:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKVDZ4dkhRcEZYdHJhamZqdXVMTWwxUUtkdTVKZjAyREpRUFRXYWFKZElKRm81TUhxdnNUd0d3Rk04NnpGNytJZjE0RlcyQUFtQi9sU1p0WGlsdU5BVmxFbHU2ODVhVTRPV0p1MGU0ZkNEVTUzNHJQVWV2M1BoVkttTXl5TytHS2ttb0U2ZWgzNmR0NGxGbzBLRE1Ec1hDYXRBZHRVVkJIbFVrUVFUKzdRRkRXLzNQMnl6ZHc4Y0tNMUE3WktzMkhNVWFyczJxa0JLYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991aa64a-b4fb-42c4-9135-868684b1d", "record_id": "flaws_cloudtrail:0000367:991aa64a-b4fb-42c4-9135-868684b1d", "row_index": 367, "timestamp": "2019-05-15T11:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991aa64a-b4fb-42c4-9135-868684b1d", "eventTime": "2019-05-15T11:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLRUhzTFI0bUllRThERlM3NFZVdWZiSk5xRC9LWjk4ZUJHQ1Vud0JjMnd3MDkxckhvZi9kcHRuRStYbHFxYzB2aFdkSjU0S2FpV1QvZjBsbStHdFVBc1U5eGQzWXdKeFJqb3daRncvTGl6cGIxV0t0R052SXNkMWxSakMyT01lbWowRmhLUDBzUXRsL2dRSU0zS2FuTCtzVi9oaWd5YmZyKytlNW41bnFLTnMwYzlkZWFoYmFSRnBOTHM4Uk0zajFOQmlKSHY4WnJEc2xRV1hXODNPZTBJLzBYNVZvNGdvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991aa64a-b4fb-42c4-9135-868684b1d", "record_id": "flaws_cloudtrail:0000368:991aa64a-b4fb-42c4-9135-868684b1d", "row_index": 368, "timestamp": "2019-05-15T11:21:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991aa64a-b4fb-42c4-9135-868684b1d", "eventTime": "2019-05-15T11:21:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLRUhzTFI0bUllRThERlM3NFZVdWZiSk5xRC9LWjk4ZUJHQ1Vud0JjMnd3MDkxckhvZi9kcHRuRStYbHFxYzB2aFdkSjU0S2FpV1QvZjBsbStHdFVBc1U5eGQzWXdKeFJqb3daRncvTGl6cGIxV0t0R052SXNkMWxSakMyT01lbWowRmhLUDBzUXRsL2dRSU0zS2FuTCtzVi9oaWd5YmZyKytlNW41bnFLTnMwYzlkZWFoYmFSRnBOTHM4Uk0zajFOQmlKSHY4WnJEc2xRV1hXODNPZTBJLzBYNVZvNGdvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86efdc74-f7f5-4e5e-a8e0-deb41dbaf4db", "record_id": "flaws_cloudtrail:0000369:86efdc74-f7f5-4e5e-a8e0-deb41dbaf4db", "row_index": 369, "timestamp": "2019-05-15T11:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86efdc74-f7f5-4e5e-a8e0-deb41dbaf4db", "eventTime": "2019-05-15T11:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZnJmUzhOUS93aUxrOWd1UXp1YmpxR2RMb0VBbHp2U3RsbCt0U0tDa1BLMk1JVXh4Q2R2NkoyWk1CRXlLVFd2RTlsQVNOQ0JBY2JhZmRFOTQ1Q3ZmOE9MRm8raFZFMXZCRzFYT0dYYzd0V01KaWI1VmVZK1h4VUVXeU9uNDd6YW1WTXVaOXIzRzBoNElkWmRwSlNhdFdBUXd5bGUya3FNVDVNMm5PRWJzTk0xUXpIdnRWMzllV2RwQlpyQjdrZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a863cd8e-87ad-4d5d-ae98-c126cb6b9b0c", "record_id": "flaws_cloudtrail:0000370:a863cd8e-87ad-4d5d-ae98-c126cb6b9b0c", "row_index": 370, "timestamp": "2019-05-15T11:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a863cd8e-87ad-4d5d-ae98-c126cb6b9b0c", "eventTime": "2019-05-15T11:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrbnZqczVlVngrK3ByNFFKeXp4Ukx0ZEF2WStzQVRINE5BZFp1bUljTlU1RnpFSTJRdlBjZDVaR3kvU3NDSDBpb2IwK1hnUndUV1JZZmNvRGhKOTlpN1NURDRiSWozRzN6dXFHZERjQTVTS2M3bWF2RnprOWlhb25VeTBzcFN5YXlSYVFnT3F5MTBvVkQ1bm5HMkc4N0NNMTdmRmtXVHZMcEhIMXdCbTVLSUJDdWRaYVM4OEJpbkd5eUU4USs5YVZkOGM1cDdiaHlGa1RKSWhQUzRlbFJxV0tSQTFYbFNvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86efdc74-f7f5-4e5e-a8e0-deb41dbaf4db", "record_id": "flaws_cloudtrail:0000371:86efdc74-f7f5-4e5e-a8e0-deb41dbaf4db", "row_index": 371, "timestamp": "2019-05-15T11:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86efdc74-f7f5-4e5e-a8e0-deb41dbaf4db", "eventTime": "2019-05-15T11:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZnJmUzhOUS93aUxrOWd1UXp1YmpxR2RMb0VBbHp2U3RsbCt0U0tDa1BLMk1JVXh4Q2R2NkoyWk1CRXlLVFd2RTlsQVNOQ0JBY2JhZmRFOTQ1Q3ZmOE9MRm8raFZFMXZCRzFYT0dYYzd0V01KaWI1VmVZK1h4VUVXeU9uNDd6YW1WTXVaOXIzRzBoNElkWmRwSlNhdFdBUXd5bGUya3FNVDVNMm5PRWJzTk0xUXpIdnRWMzllV2RwQlpyQjdrZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a863cd8e-87ad-4d5d-ae98-c126cb6b9b0c", "record_id": "flaws_cloudtrail:0000372:a863cd8e-87ad-4d5d-ae98-c126cb6b9b0c", "row_index": 372, "timestamp": "2019-05-15T11:21:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a863cd8e-87ad-4d5d-ae98-c126cb6b9b0c", "eventTime": "2019-05-15T11:21:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrbnZqczVlVngrK3ByNFFKeXp4Ukx0ZEF2WStzQVRINE5BZFp1bUljTlU1RnpFSTJRdlBjZDVaR3kvU3NDSDBpb2IwK1hnUndUV1JZZmNvRGhKOTlpN1NURDRiSWozRzN6dXFHZERjQTVTS2M3bWF2RnprOWlhb25VeTBzcFN5YXlSYVFnT3F5MTBvVkQ1bm5HMkc4N0NNMTdmRmtXVHZMcEhIMXdCbTVLSUJDdWRaYVM4OEJpbkd5eUU4USs5YVZkOGM1cDdiaHlGa1RKSWhQUzRlbFJxV0tSQTFYbFNvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39eccb36-a533-4b6a-80b9-5dcca15c0008", "record_id": "flaws_cloudtrail:0000373:39eccb36-a533-4b6a-80b9-5dcca15c0008", "row_index": 373, "timestamp": "2019-05-15T11:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39eccb36-a533-4b6a-80b9-5dcca15c0008", "eventTime": "2019-05-15T11:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5SVdRQXVZSVhGYzRTRDBtenFPVjlhRjZhV093aVRjSmgzdjAraTlWQWt3THhsWUxSc1kraDJpdTlJWlN3OVVSd3hIYWpPa2lCVlBSU3EvSjlyRUVnTkZtLzBLTlFXS0U2UnBEdVRSdlROSmVQbmo5TGkvU1dXaVNHeVpDNWY2ZE5uVlVkNm9xZTdYUTN4RFVGWmJCMlNnVzBBcUhJOHdBd1ZoMkovSThIWG1WS045TkpTUzJqT01KMTdINi9BejlJT2dsRlY2VUIwZy9Ca2NOOHlRTHE2eno1aEorN1o4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35373d-4460-447a-b4cc-2595294092f9", "record_id": "flaws_cloudtrail:0000374:35373d-4460-447a-b4cc-2595294092f9", "row_index": 374, "timestamp": "2019-05-15T11:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35373d-4460-447a-b4cc-2595294092f9", "eventTime": "2019-05-15T11:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoMVFCMnVqZk1qb0k2Q3pnb1g2MzhLVTJ5UUQ0eFBqaEo0OWdwZFMwS2J2ZGZQaVVvM2xSdyt6ZGtYVERtLzhDeXFIVXFRaG9rSkVBYXowMlQ4MTV5RlFxcVBIeW1FTjZ3bXZMVHlRVm5JWGpJK2VadjJKV1BlUEV6RllzSkRaZHFjWkZHZ0xPWUczZU9zTEQ2N09DTVBqOTJjZWNISGFtVnBTaWpwM29BMDBHYzVWTC92NlNhK0VOa2RPZUsydz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39eccb36-a533-4b6a-80b9-5dcca15c0008", "record_id": "flaws_cloudtrail:0000375:39eccb36-a533-4b6a-80b9-5dcca15c0008", "row_index": 375, "timestamp": "2019-05-15T11:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39eccb36-a533-4b6a-80b9-5dcca15c0008", "eventTime": "2019-05-15T11:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5SVdRQXVZSVhGYzRTRDBtenFPVjlhRjZhV093aVRjSmgzdjAraTlWQWt3THhsWUxSc1kraDJpdTlJWlN3OVVSd3hIYWpPa2lCVlBSU3EvSjlyRUVnTkZtLzBLTlFXS0U2UnBEdVRSdlROSmVQbmo5TGkvU1dXaVNHeVpDNWY2ZE5uVlVkNm9xZTdYUTN4RFVGWmJCMlNnVzBBcUhJOHdBd1ZoMkovSThIWG1WS045TkpTUzJqT01KMTdINi9BejlJT2dsRlY2VUIwZy9Ca2NOOHlRTHE2eno1aEorN1o4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35373d-4460-447a-b4cc-2595294092f9", "record_id": "flaws_cloudtrail:0000376:35373d-4460-447a-b4cc-2595294092f9", "row_index": 376, "timestamp": "2019-05-15T11:21:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35373d-4460-447a-b4cc-2595294092f9", "eventTime": "2019-05-15T11:21:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoMVFCMnVqZk1qb0k2Q3pnb1g2MzhLVTJ5UUQ0eFBqaEo0OWdwZFMwS2J2ZGZQaVVvM2xSdyt6ZGtYVERtLzhDeXFIVXFRaG9rSkVBYXowMlQ4MTV5RlFxcVBIeW1FTjZ3bXZMVHlRVm5JWGpJK2VadjJKV1BlUEV6RllzSkRaZHFjWkZHZ0xPWUczZU9zTEQ2N09DTVBqOTJjZWNISGFtVnBTaWpwM29BMDBHYzVWTC92NlNhK0VOa2RPZUsydz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8ca3812-2494-44d5-a481-a222878a881", "record_id": "flaws_cloudtrail:0000377:e8ca3812-2494-44d5-a481-a222878a881", "row_index": 377, "timestamp": "2019-05-15T11:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8ca3812-2494-44d5-a481-a222878a881", "eventTime": "2019-05-15T11:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOR0J3VXNOdVk2WWN2bWRxRzg2RkR2LzRGcVdLUGF0ck04UVFSMkgyc1NUYjU3MldHNlRyMFBwRzM4UERaZVV3WkcvZFc0NFhJaDZ5SGVYYWd1MjI4aEI4eUcyNlpMMGdqOTloZEtJaWlkS2cxM0tCUmtkQytxd0lYWjZJNFJjNEdWS0xycHMvbHdoUS8zNlh3dDVSN3JwTURINmxmYkVyVDM0b1AvNkplUGJmaXF4anVLWU1raFdMdzBWMWtRVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fae77414-43c3-4091-b14e-36dbdae6fcec", "record_id": "flaws_cloudtrail:0000378:fae77414-43c3-4091-b14e-36dbdae6fcec", "row_index": 378, "timestamp": "2019-05-15T11:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fae77414-43c3-4091-b14e-36dbdae6fcec", "eventTime": "2019-05-15T11:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkZjVBZXl2NC9PU0l4Y3kvYUcya1BuSWxaMHIrOHFHVzBYVG1iTkJ1Mkc4Q2VJWjd4bFpLNkxibC9oaU1tUUpuS2JJbXFxT2tYMVlSc21RYXFjcmM3dVE5NmRoV1h4bFc5RmRHRjUvcU9nSjVvSHVwaFJqQ20zMHBjSGhxdlRVUGZ2Q3V1TzlDLzRHampaQTBsREJVREZLMFpHcDJNOUlIY3RGSjZVS3RlWnIyVmE5RWtmZXVKSisyMUxvTmh2T0l1NXk0R0U3dFFlK3BOMU81UUlSTHBYN09yOHVTT0ZnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8ca3812-2494-44d5-a481-a222878a881", "record_id": "flaws_cloudtrail:0000379:e8ca3812-2494-44d5-a481-a222878a881", "row_index": 379, "timestamp": "2019-05-15T11:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8ca3812-2494-44d5-a481-a222878a881", "eventTime": "2019-05-15T11:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOR0J3VXNOdVk2WWN2bWRxRzg2RkR2LzRGcVdLUGF0ck04UVFSMkgyc1NUYjU3MldHNlRyMFBwRzM4UERaZVV3WkcvZFc0NFhJaDZ5SGVYYWd1MjI4aEI4eUcyNlpMMGdqOTloZEtJaWlkS2cxM0tCUmtkQytxd0lYWjZJNFJjNEdWS0xycHMvbHdoUS8zNlh3dDVSN3JwTURINmxmYkVyVDM0b1AvNkplUGJmaXF4anVLWU1raFdMdzBWMWtRVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fae77414-43c3-4091-b14e-36dbdae6fcec", "record_id": "flaws_cloudtrail:0000380:fae77414-43c3-4091-b14e-36dbdae6fcec", "row_index": 380, "timestamp": "2019-05-15T11:21:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fae77414-43c3-4091-b14e-36dbdae6fcec", "eventTime": "2019-05-15T11:21:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkZjVBZXl2NC9PU0l4Y3kvYUcya1BuSWxaMHIrOHFHVzBYVG1iTkJ1Mkc4Q2VJWjd4bFpLNkxibC9oaU1tUUpuS2JJbXFxT2tYMVlSc21RYXFjcmM3dVE5NmRoV1h4bFc5RmRHRjUvcU9nSjVvSHVwaFJqQ20zMHBjSGhxdlRVUGZ2Q3V1TzlDLzRHampaQTBsREJVREZLMFpHcDJNOUlIY3RGSjZVS3RlWnIyVmE5RWtmZXVKSisyMUxvTmh2T0l1NXk0R0U3dFFlK3BOMU81UUlSTHBYN09yOHVTT0ZnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68faf07e-c0db-40a4-bca2-60762a14466", "record_id": "flaws_cloudtrail:0000381:68faf07e-c0db-40a4-bca2-60762a14466", "row_index": 381, "timestamp": "2019-05-15T11:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68faf07e-c0db-40a4-bca2-60762a14466", "eventTime": "2019-05-15T11:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMSlBWZ3pjVVlKMFpmQ1JKWXp6VDhGM3J6Y1BXV0hFY3QwcFIzNlZ3SVcvRWQ2QnlWQ1YwQUJaWVRHbnQyMkw4ZXVQUVFlaWE3NTF0OTMrcVNtMWJPcTZIRk9EaE51Z2NkWERDMXdWUlordUlDTkVDbDlCSlJveUdNU0lrcGc5SjUzTUtkOFgrTi9SWHhvNFhJTDBBZ0llZ0FKTGFMZ2MzSGZ4U3RaWjhTTTlObHhOK21kYTZOd0dOZE5PUW41TEV3eEpYUGZub1NpdWtWUXlVa3FNY0FNUUVaRHFQRVM4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190122a3b-e0b9-4188-95af-0ff36773f273", "record_id": "flaws_cloudtrail:0000382:190122a3b-e0b9-4188-95af-0ff36773f273", "row_index": 382, "timestamp": "2019-05-15T11:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190122a3b-e0b9-4188-95af-0ff36773f273", "eventTime": "2019-05-15T11:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvcWV2OXpyUGN4QnNjVC8vMnA5OHNuQzZ2bGUxMmNNb2xLeVA2UlJaU1hpODM3K1R3NXlXWTROWElqSEVsMWpQTVRKTmpPRUw3R1NwQko0QkkzMTgyMnBxdk1oSWRxcE0wYUxjdjNFSG5RbFhCUXJnL24wSktUQVlhaGI1MmgvOTlVWnZxWXNlT1FUVWdTVmxPNHpFKzJwQ1Z3dFB4UTlCcGhvMnl2VVRxSXNtU0I3eDROb3lmYXBIblpoVk1tOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68faf07e-c0db-40a4-bca2-60762a14466", "record_id": "flaws_cloudtrail:0000383:68faf07e-c0db-40a4-bca2-60762a14466", "row_index": 383, "timestamp": "2019-05-15T11:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68faf07e-c0db-40a4-bca2-60762a14466", "eventTime": "2019-05-15T11:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMSlBWZ3pjVVlKMFpmQ1JKWXp6VDhGM3J6Y1BXV0hFY3QwcFIzNlZ3SVcvRWQ2QnlWQ1YwQUJaWVRHbnQyMkw4ZXVQUVFlaWE3NTF0OTMrcVNtMWJPcTZIRk9EaE51Z2NkWERDMXdWUlordUlDTkVDbDlCSlJveUdNU0lrcGc5SjUzTUtkOFgrTi9SWHhvNFhJTDBBZ0llZ0FKTGFMZ2MzSGZ4U3RaWjhTTTlObHhOK21kYTZOd0dOZE5PUW41TEV3eEpYUGZub1NpdWtWUXlVa3FNY0FNUUVaRHFQRVM4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190122a3b-e0b9-4188-95af-0ff36773f273", "record_id": "flaws_cloudtrail:0000384:190122a3b-e0b9-4188-95af-0ff36773f273", "row_index": 384, "timestamp": "2019-05-15T11:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190122a3b-e0b9-4188-95af-0ff36773f273", "eventTime": "2019-05-15T11:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvcWV2OXpyUGN4QnNjVC8vMnA5OHNuQzZ2bGUxMmNNb2xLeVA2UlJaU1hpODM3K1R3NXlXWTROWElqSEVsMWpQTVRKTmpPRUw3R1NwQko0QkkzMTgyMnBxdk1oSWRxcE0wYUxjdjNFSG5RbFhCUXJnL24wSktUQVlhaGI1MmgvOTlVWnZxWXNlT1FUVWdTVmxPNHpFKzJwQ1Z3dFB4UTlCcGhvMnl2VVRxSXNtU0I3eDROb3lmYXBIblpoVk1tOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b37b47a2-74ff-4802-be99-d51a8247e94a", "record_id": "flaws_cloudtrail:0000385:b37b47a2-74ff-4802-be99-d51a8247e94a", "row_index": 385, "timestamp": "2019-05-15T11:21:35Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b37b47a2-74ff-4802-be99-d51a8247e94a", "eventTime": "2019-05-15T11:21:35Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b37b47a2-74ff-4802-be99-d51a8247e94a", "record_id": "flaws_cloudtrail:0000386:b37b47a2-74ff-4802-be99-d51a8247e94a", "row_index": 386, "timestamp": "2019-05-15T11:21:35Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b37b47a2-74ff-4802-be99-d51a8247e94a", "eventTime": "2019-05-15T11:21:35Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a660007c-e0e6-4a5a-9c67-ac7d919660ec", "record_id": "flaws_cloudtrail:0000387:3a660007c-e0e6-4a5a-9c67-ac7d919660ec", "row_index": 387, "timestamp": "2019-05-15T11:22:14Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a660007c-e0e6-4a5a-9c67-ac7d919660ec", "eventTime": "2019-05-15T11:22:14Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a660007c-e0e6-4a5a-9c67-ac7d919660ec", "record_id": "flaws_cloudtrail:0000388:3a660007c-e0e6-4a5a-9c67-ac7d919660ec", "row_index": 388, "timestamp": "2019-05-15T11:22:14Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a660007c-e0e6-4a5a-9c67-ac7d919660ec", "eventTime": "2019-05-15T11:22:14Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db487833-31e9-42d7-afdc-34d1b82b62da", "record_id": "flaws_cloudtrail:0000389:db487833-31e9-42d7-afdc-34d1b82b62da", "row_index": 389, "timestamp": "2019-05-15T11:23:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db487833-31e9-42d7-afdc-34d1b82b62da", "eventTime": "2019-05-15T11:23:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db487833-31e9-42d7-afdc-34d1b82b62da", "record_id": "flaws_cloudtrail:0000390:db487833-31e9-42d7-afdc-34d1b82b62da", "row_index": 390, "timestamp": "2019-05-15T11:23:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db487833-31e9-42d7-afdc-34d1b82b62da", "eventTime": "2019-05-15T11:23:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59d42b15-6ff2-45c2-b27e-9d14cd0614d3", "record_id": "flaws_cloudtrail:0000391:59d42b15-6ff2-45c2-b27e-9d14cd0614d3", "row_index": 391, "timestamp": "2019-05-15T11:24:54Z", "event_type": "GetApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59d42b15-6ff2-45c2-b27e-9d14cd0614d3", "eventTime": "2019-05-15T11:24:54Z", "eventName": "GetApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59d42b15-6ff2-45c2-b27e-9d14cd0614d3", "record_id": "flaws_cloudtrail:0000392:59d42b15-6ff2-45c2-b27e-9d14cd0614d3", "row_index": 392, "timestamp": "2019-05-15T11:24:54Z", "event_type": "GetApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59d42b15-6ff2-45c2-b27e-9d14cd0614d3", "eventTime": "2019-05-15T11:24:54Z", "eventName": "GetApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7682faa2-afce-4fb0-8b13-b9d8215d2d96", "record_id": "flaws_cloudtrail:0000393:7682faa2-afce-4fb0-8b13-b9d8215d2d96", "row_index": 393, "timestamp": "2019-05-15T11:26:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7682faa2-afce-4fb0-8b13-b9d8215d2d96", "eventTime": "2019-05-15T11:26:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7682faa2-afce-4fb0-8b13-b9d8215d2d96", "record_id": "flaws_cloudtrail:0000394:7682faa2-afce-4fb0-8b13-b9d8215d2d96", "row_index": 394, "timestamp": "2019-05-15T11:26:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7682faa2-afce-4fb0-8b13-b9d8215d2d96", "eventTime": "2019-05-15T11:26:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8f6a0a4-da5a-4a89-a685-a039500db697", "record_id": "flaws_cloudtrail:0000395:d8f6a0a4-da5a-4a89-a685-a039500db697", "row_index": 395, "timestamp": "2019-05-15T11:27:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "[aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8f6a0a4-da5a-4a89-a685-a039500db697", "eventTime": "2019-05-15T11:27:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "[aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8f6a0a4-da5a-4a89-a685-a039500db697", "record_id": "flaws_cloudtrail:0000396:d8f6a0a4-da5a-4a89-a685-a039500db697", "row_index": 396, "timestamp": "2019-05-15T11:27:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.34.83.223", "user_agent": "[aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8f6a0a4-da5a-4a89-a685-a039500db697", "eventTime": "2019-05-15T11:27:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.34.83.223", "userAgent": "[aws-cli/1.16.68 Python/3.6.6 Darwin/17.7.0 botocore/1.12.58]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dec7500c-87fc-46de-8285-cc1d586b1d16", "record_id": "flaws_cloudtrail:0000397:dec7500c-87fc-46de-8285-cc1d586b1d16", "row_index": 397, "timestamp": "2019-05-15T11:28:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dec7500c-87fc-46de-8285-cc1d586b1d16", "eventTime": "2019-05-15T11:28:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dec7500c-87fc-46de-8285-cc1d586b1d16", "record_id": "flaws_cloudtrail:0000398:dec7500c-87fc-46de-8285-cc1d586b1d16", "row_index": 398, "timestamp": "2019-05-15T11:28:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dec7500c-87fc-46de-8285-cc1d586b1d16", "eventTime": "2019-05-15T11:28:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecf756552-ed0c-4b00-b529-f23622e0d7", "record_id": "flaws_cloudtrail:0000399:ecf756552-ed0c-4b00-b529-f23622e0d7", "row_index": 399, "timestamp": "2019-05-15T11:28:54Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecf756552-ed0c-4b00-b529-f23622e0d7", "eventTime": "2019-05-15T11:28:54Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecf756552-ed0c-4b00-b529-f23622e0d7", "record_id": "flaws_cloudtrail:0000400:ecf756552-ed0c-4b00-b529-f23622e0d7", "row_index": 400, "timestamp": "2019-05-15T11:28:54Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecf756552-ed0c-4b00-b529-f23622e0d7", "eventTime": "2019-05-15T11:28:54Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddfef436-5340-4f09-8b7f-92419f344a7e", "record_id": "flaws_cloudtrail:0000401:ddfef436-5340-4f09-8b7f-92419f344a7e", "row_index": 401, "timestamp": "2019-05-15T11:29:28Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddfef436-5340-4f09-8b7f-92419f344a7e", "eventTime": "2019-05-15T11:29:28Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddfef436-5340-4f09-8b7f-92419f344a7e", "record_id": "flaws_cloudtrail:0000402:ddfef436-5340-4f09-8b7f-92419f344a7e", "row_index": 402, "timestamp": "2019-05-15T11:29:28Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddfef436-5340-4f09-8b7f-92419f344a7e", "eventTime": "2019-05-15T11:29:28Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba8091cf-036b-431a-9b20-b3c3aab98722", "record_id": "flaws_cloudtrail:0000403:ba8091cf-036b-431a-9b20-b3c3aab98722", "row_index": 403, "timestamp": "2019-05-15T11:30:20Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba8091cf-036b-431a-9b20-b3c3aab98722", "eventTime": "2019-05-15T11:30:20Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba8091cf-036b-431a-9b20-b3c3aab98722", "record_id": "flaws_cloudtrail:0000404:ba8091cf-036b-431a-9b20-b3c3aab98722", "row_index": 404, "timestamp": "2019-05-15T11:30:20Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba8091cf-036b-431a-9b20-b3c3aab98722", "eventTime": "2019-05-15T11:30:20Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d5408d-8bbb-4cc4-83e3-aecfe338bede", "record_id": "flaws_cloudtrail:0000405:b0d5408d-8bbb-4cc4-83e3-aecfe338bede", "row_index": 405, "timestamp": "2019-05-15T11:31:27Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d5408d-8bbb-4cc4-83e3-aecfe338bede", "eventTime": "2019-05-15T11:31:27Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "v"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/v"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d5408d-8bbb-4cc4-83e3-aecfe338bede", "record_id": "flaws_cloudtrail:0000406:b0d5408d-8bbb-4cc4-83e3-aecfe338bede", "row_index": 406, "timestamp": "2019-05-15T11:31:27Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d5408d-8bbb-4cc4-83e3-aecfe338bede", "eventTime": "2019-05-15T11:31:27Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "v"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/v"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b4cfea-bf91-46a5-bfd5-46bed588c355", "record_id": "flaws_cloudtrail:0000407:55b4cfea-bf91-46a5-bfd5-46bed588c355", "row_index": 407, "timestamp": "2019-05-15T11:31:35Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "59.255.5.234", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b4cfea-bf91-46a5-bfd5-46bed588c355", "eventTime": "2019-05-15T11:31:35Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "59.255.5.234", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75%2F"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75%2F"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b4cfea-bf91-46a5-bfd5-46bed588c355", "record_id": "flaws_cloudtrail:0000408:55b4cfea-bf91-46a5-bfd5-46bed588c355", "row_index": 408, "timestamp": "2019-05-15T11:31:35Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "59.255.5.234", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b4cfea-bf91-46a5-bfd5-46bed588c355", "eventTime": "2019-05-15T11:31:35Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "59.255.5.234", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75%2F"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75%2F"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf3ce49-1de6-43ec-a27e-69c013c2fb48", "record_id": "flaws_cloudtrail:0000409:2cf3ce49-1de6-43ec-a27e-69c013c2fb48", "row_index": 409, "timestamp": "2019-05-15T11:31:38Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "242.251.253.109", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf3ce49-1de6-43ec-a27e-69c013c2fb48", "eventTime": "2019-05-15T11:31:38Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "242.251.253.109", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf3ce49-1de6-43ec-a27e-69c013c2fb48", "record_id": "flaws_cloudtrail:0000410:2cf3ce49-1de6-43ec-a27e-69c013c2fb48", "row_index": 410, "timestamp": "2019-05-15T11:31:38Z", "event_type": "GetApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "242.251.253.109", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf3ce49-1de6-43ec-a27e-69c013c2fb48", "eventTime": "2019-05-15T11:31:38Z", "eventName": "GetApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "242.251.253.109", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b300ff-fe01-4ef5-a35b-355a2889e661", "record_id": "flaws_cloudtrail:0000411:06b300ff-fe01-4ef5-a35b-355a2889e661", "row_index": 411, "timestamp": "2019-05-15T11:32:01Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b300ff-fe01-4ef5-a35b-355a2889e661", "eventTime": "2019-05-15T11:32:01Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75%2F"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75%2F/stages"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b300ff-fe01-4ef5-a35b-355a2889e661", "record_id": "flaws_cloudtrail:0000412:06b300ff-fe01-4ef5-a35b-355a2889e661", "row_index": 412, "timestamp": "2019-05-15T11:32:01Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 912, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b300ff-fe01-4ef5-a35b-355a2889e661", "eventTime": "2019-05-15T11:32:01Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75%2F"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75%2F/stages"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c0edf7e-94db-4c77-94b6-851bab4f1053", "record_id": "flaws_cloudtrail:0000413:8c0edf7e-94db-4c77-94b6-851bab4f1053", "row_index": 413, "timestamp": "2019-05-15T11:32:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c0edf7e-94db-4c77-94b6-851bab4f1053", "eventTime": "2019-05-15T11:32:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75/stages"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c0edf7e-94db-4c77-94b6-851bab4f1053", "record_id": "flaws_cloudtrail:0000414:8c0edf7e-94db-4c77-94b6-851bab4f1053", "row_index": 414, "timestamp": "2019-05-15T11:32:04Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "115.207.241.151", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 906, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c0edf7e-94db-4c77-94b6-851bab4f1053", "eventTime": "2019-05-15T11:32:04Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.207.241.151", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "AccessDeniedException", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"apiId": "s33ppypa75"}, "responseElements": {"Message": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/apis/s33ppypa75/stages"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7425d758-90c4-466f-b0ed-4b40361aefe6", "record_id": "flaws_cloudtrail:0000415:7425d758-90c4-466f-b0ed-4b40361aefe6", "row_index": 415, "timestamp": "2019-05-15T11:32:17Z", "event_type": "CreateSnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7425d758-90c4-466f-b0ed-4b40361aefe6", "eventTime": "2019-05-15T11:32:17Z", "eventName": "CreateSnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeId": "vol-8e100f305b7a6fef3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7425d758-90c4-466f-b0ed-4b40361aefe6", "record_id": "flaws_cloudtrail:0000416:7425d758-90c4-466f-b0ed-4b40361aefe6", "row_index": 416, "timestamp": "2019-05-15T11:32:17Z", "event_type": "CreateSnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7425d758-90c4-466f-b0ed-4b40361aefe6", "eventTime": "2019-05-15T11:32:17Z", "eventName": "CreateSnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeId": "vol-8e100f305b7a6fef3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da791eb-7401-400b-bfbf-49fcf79fb663", "record_id": "flaws_cloudtrail:0000417:4da791eb-7401-400b-bfbf-49fcf79fb663", "row_index": 417, "timestamp": "2019-05-15T11:32:24Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da791eb-7401-400b-bfbf-49fcf79fb663", "eventTime": "2019-05-15T11:32:24Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified 811596193553:s33ppypa75/", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75/", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da791eb-7401-400b-bfbf-49fcf79fb663", "record_id": "flaws_cloudtrail:0000418:4da791eb-7401-400b-bfbf-49fcf79fb663", "row_index": 418, "timestamp": "2019-05-15T11:32:24Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da791eb-7401-400b-bfbf-49fcf79fb663", "eventTime": "2019-05-15T11:32:24Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified 811596193553:s33ppypa75/", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75/", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cc62bf7-d82e-4dc1-a8da-236b26ee747b", "record_id": "flaws_cloudtrail:0000419:5cc62bf7-d82e-4dc1-a8da-236b26ee747b", "row_index": 419, "timestamp": "2019-05-15T11:32:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cc62bf7-d82e-4dc1-a8da-236b26ee747b", "eventTime": "2019-05-15T11:32:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cc62bf7-d82e-4dc1-a8da-236b26ee747b", "record_id": "flaws_cloudtrail:0000420:5cc62bf7-d82e-4dc1-a8da-236b26ee747b", "row_index": 420, "timestamp": "2019-05-15T11:32:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cc62bf7-d82e-4dc1-a8da-236b26ee747b", "eventTime": "2019-05-15T11:32:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6393e00b-e7f7-4359-9c48-7ab9472ec4f1", "record_id": "flaws_cloudtrail:0000421:6393e00b-e7f7-4359-9c48-7ab9472ec4f1", "row_index": 421, "timestamp": "2019-05-15T11:32:56Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6393e00b-e7f7-4359-9c48-7ab9472ec4f1", "eventTime": "2019-05-15T11:32:56Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6393e00b-e7f7-4359-9c48-7ab9472ec4f1", "record_id": "flaws_cloudtrail:0000422:6393e00b-e7f7-4359-9c48-7ab9472ec4f1", "row_index": 422, "timestamp": "2019-05-15T11:32:56Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6393e00b-e7f7-4359-9c48-7ab9472ec4f1", "eventTime": "2019-05-15T11:32:56Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.16.156 Python/3.7.3 Darwin/18.5.0 botocore/1.12.146", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6534bed4-f0ec-4ebc-aa0e-e91b234830f4", "record_id": "flaws_cloudtrail:0000423:6534bed4-f0ec-4ebc-aa0e-e91b234830f4", "row_index": 423, "timestamp": "2019-05-15T11:33:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWJZHNYO7RA0YSMO4", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "226.70.16.212", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6534bed4-f0ec-4ebc-aa0e-e91b234830f4", "eventTime": "2019-05-15T11:33:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.70.16.212", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWJZHNYO7RA0YSMO4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T11:33:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/05/15/[$LATEST]be206139449ff7b9ab24a14d5e89c43a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708309b0-d597-47b6-b315-8adf4b7040df", "record_id": "flaws_cloudtrail:0000424:708309b0-d597-47b6-b315-8adf4b7040df", "row_index": 424, "timestamp": "2019-05-15T11:33:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708309b0-d597-47b6-b315-8adf4b7040df", "eventTime": "2019-05-15T11:33:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWJZHNYO7RA0YSMO4", "expiration": "May 15, 2019 11:33:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27f74fc5-465b-4b02-bf97-1f5856f002b6", "record_id": "flaws_cloudtrail:0000425:27f74fc5-465b-4b02-bf97-1f5856f002b6", "row_index": 425, "timestamp": "2019-05-15T11:33:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27f74fc5-465b-4b02-bf97-1f5856f002b6", "eventTime": "2019-05-15T11:33:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2JMPN5IYMAPUEZSY", "expiration": "May 15, 2019 11:33:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27f74fc5-465b-4b02-bf97-1f5856f002b6", "record_id": "flaws_cloudtrail:0000426:27f74fc5-465b-4b02-bf97-1f5856f002b6", "row_index": 426, "timestamp": "2019-05-15T11:33:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1630, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27f74fc5-465b-4b02-bf97-1f5856f002b6", "eventTime": "2019-05-15T11:33:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2JMPN5IYMAPUEZSY", "expiration": "May 15, 2019 11:33:47 PM", "sessionToken": "AgoJb3JpZ2luX2VjEPT//////////wEaCXVzLXdlc3QtMiJGMEQCIAmgYFJmydFBrPFBL0mKn9ZR9mYFXPBOJsE6lGydp6hoAiBu4jgnK9RjePAW5ZCGAeIKsWjbm4NFNyMS0ycxCNZK8CqLAgjt//////////8BEAAaDDk3NTQyNjI2MjAyOSIM9AjrqDgyD7KSqHPBKt8BWevR+fCIhxkNsl45aDNUF8sszPKuMJ8eqD0p109VSAA/B+J1IPcofMHCRof/8Fo3d1J6brXWoxCweZ9H7CCaph7ziAEh86cOXW5++hQLLXW8upWdSu2BNF1DYeQDHmNAbOebb8djALyQ/C+qTJfmLBkP7vrryGuU4F+BKDAyMyVmqy6nLKwDr9gu6YAsAjoioknKTJ+N8wMLo3eLVTkvCIiNRrkWznx0JXbUOS4PBDkxiz87wC6QXY6lQ3IQxtj4cgATzv+DRL96oPimFvmPTigC5wDo/yZsoKTLB90xWjCb8u/mBTq1Ac2OG0PcrjpjnyIaI86Oe+DedeBzT/LTjv7WXkwxQaaKpFPgizHzaEUAazpTRe4WPe/QsCpE5YdIp/goI1MaI7CkZeN+N+76iQPpFTvbhfj5mH1IOHyI/KMnOucSYLq3LzyJ4fqyoBq3NRpiXmv44j/PfYKC7K99JypFF4vOyglGF+jyQISpSD03NH9rPZwRRuk/Yz+yD5JBL5pEWCFhnzedOYamnFsmWTUcg8lx68iD1rGsLpc="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6534bed4-f0ec-4ebc-aa0e-e91b234830f4", "record_id": "flaws_cloudtrail:0000427:6534bed4-f0ec-4ebc-aa0e-e91b234830f4", "row_index": 427, "timestamp": "2019-05-15T11:33:47Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAWJZHNYO7RA0YSMO4", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "226.70.16.212", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6534bed4-f0ec-4ebc-aa0e-e91b234830f4", "eventTime": "2019-05-15T11:33:47Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "226.70.16.212", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWJZHNYO7RA0YSMO4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-15T11:33:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/05/15/[$LATEST]be206139449ff7b9ab24a14d5e89c43a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708309b0-d597-47b6-b315-8adf4b7040df", "record_id": "flaws_cloudtrail:0000428:708309b0-d597-47b6-b315-8adf4b7040df", "row_index": 428, "timestamp": "2019-05-15T11:33:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708309b0-d597-47b6-b315-8adf4b7040df", "eventTime": "2019-05-15T11:33:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWJZHNYO7RA0YSMO4", "expiration": "May 15, 2019 11:33:47 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d5bfc43-02b1-4533-af25-595c700ada89", "record_id": "flaws_cloudtrail:0000429:7d5bfc43-02b1-4533-af25-595c700ada89", "row_index": 429, "timestamp": "2019-05-15T11:35:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d5bfc43-02b1-4533-af25-595c700ada89", "eventTime": "2019-05-15T11:35:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d5bfc43-02b1-4533-af25-595c700ada89", "record_id": "flaws_cloudtrail:0000430:7d5bfc43-02b1-4533-af25-595c700ada89", "row_index": 430, "timestamp": "2019-05-15T11:35:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d5bfc43-02b1-4533-af25-595c700ada89", "eventTime": "2019-05-15T11:35:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be24422e-8722-4a9a-99a6-e12a4e1602a8", "record_id": "flaws_cloudtrail:0000431:be24422e-8722-4a9a-99a6-e12a4e1602a8", "row_index": 431, "timestamp": "2019-05-15T11:35:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be24422e-8722-4a9a-99a6-e12a4e1602a8", "eventTime": "2019-05-15T11:35:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLLzJuWEpHNU4rZUs1S2RBOHhzdDZvOXdlejZ4OWVkN1pBSUhaMVgvd1luYk14Rk5PWit6QzNHcklTQW9hYW9oVnlIMXJnc1VSNEwrVTlnS1dRR0svVFVaMUc0N01WcExoaFIyUnNnYWxGSXpyUTFtQWtvWHJ5YUVGY0huQ2VzQnhMWmZuVG9ROHF6NitLSXVHc3FtL0piWW9qZEk1MVVzOG0renhXWlpkQjRUMEJqbGNTak83MS9YN3NPTE1QWEFPaUdCMVkvSGo4UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be24422e-8722-4a9a-99a6-e12a4e1602a8", "record_id": "flaws_cloudtrail:0000432:be24422e-8722-4a9a-99a6-e12a4e1602a8", "row_index": 432, "timestamp": "2019-05-15T11:35:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be24422e-8722-4a9a-99a6-e12a4e1602a8", "eventTime": "2019-05-15T11:35:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLLzJuWEpHNU4rZUs1S2RBOHhzdDZvOXdlejZ4OWVkN1pBSUhaMVgvd1luYk14Rk5PWit6QzNHcklTQW9hYW9oVnlIMXJnc1VSNEwrVTlnS1dRR0svVFVaMUc0N01WcExoaFIyUnNnYWxGSXpyUTFtQWtvWHJ5YUVGY0huQ2VzQnhMWmZuVG9ROHF6NitLSXVHc3FtL0piWW9qZEk1MVVzOG0renhXWlpkQjRUMEJqbGNTak83MS9YN3NPTE1QWEFPaUdCMVkvSGo4UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969bae75-b626-4ab5-a93d-e7451fe06f1a", "record_id": "flaws_cloudtrail:0000433:969bae75-b626-4ab5-a93d-e7451fe06f1a", "row_index": 433, "timestamp": "2019-05-15T11:35:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969bae75-b626-4ab5-a93d-e7451fe06f1a", "eventTime": "2019-05-15T11:35:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBeGpXRkYrOW1GckJJY1NiOXhTbURaQ3RBWjE1NjhOZkc1TUNvQ0pwZngzYkdmeGxmNXZqTjNieXJKS0ZzZGQ1YXp5WGpWanZYdm9wWE5DVU1YMkV2RlVMZGZJTGhNK09neFFmcDdOckNZRm5la0d6VmxrMzJ1d0hNMHRRenRGeng4Q3BIRHVsbjhOUkh5MUE2UHU2TFhsT2JCT0tnVWJhMDhSa1drKzVhL1ZmRjc1RVV0U2JXZGFPcEFFVFlPdjJ5bzB1S3J0b3Z1NWFMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969bae75-b626-4ab5-a93d-e7451fe06f1a", "record_id": "flaws_cloudtrail:0000434:969bae75-b626-4ab5-a93d-e7451fe06f1a", "row_index": 434, "timestamp": "2019-05-15T11:35:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969bae75-b626-4ab5-a93d-e7451fe06f1a", "eventTime": "2019-05-15T11:35:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBeGpXRkYrOW1GckJJY1NiOXhTbURaQ3RBWjE1NjhOZkc1TUNvQ0pwZngzYkdmeGxmNXZqTjNieXJKS0ZzZGQ1YXp5WGpWanZYdm9wWE5DVU1YMkV2RlVMZGZJTGhNK09neFFmcDdOckNZRm5la0d6VmxrMzJ1d0hNMHRRenRGeng4Q3BIRHVsbjhOUkh5MUE2UHU2TFhsT2JCT0tnVWJhMDhSa1drKzVhL1ZmRjc1RVV0U2JXZGFPcEFFVFlPdjJ5bzB1S3J0b3Z1NWFMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87c8095f-589a-4eb2-8144-9aec5401e8f1", "record_id": "flaws_cloudtrail:0000435:87c8095f-589a-4eb2-8144-9aec5401e8f1", "row_index": 435, "timestamp": "2019-05-15T11:35:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87c8095f-589a-4eb2-8144-9aec5401e8f1", "eventTime": "2019-05-15T11:35:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHam5za2lQRThWejlOUFVVaFNaRVE2RDVqN2N6NFpUVTQ5NkRQZEFKQTQ1ZURzcEZESjlqdU5PYmVLV3Z6UzVMaEx0dC8rQWZZQzJzc1NDVDF3Y0NHcXVZNG5RTHVaYTBKdGIyRmVtOUVlMENmQ1JJMkFMU0c3VEhJWEZ4czBPK2t5TnIzdUV3cVZ2RE5vSnI2NCtGb3ZDbVE5YjJBamZCWkt6ZzdWNUV1MDI4Nk85NUY2L1pNZDF6V0Q1dzBaek9QbE0reHBJOGNTYWZ6Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87c8095f-589a-4eb2-8144-9aec5401e8f1", "record_id": "flaws_cloudtrail:0000436:87c8095f-589a-4eb2-8144-9aec5401e8f1", "row_index": 436, "timestamp": "2019-05-15T11:35:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87c8095f-589a-4eb2-8144-9aec5401e8f1", "eventTime": "2019-05-15T11:35:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHam5za2lQRThWejlOUFVVaFNaRVE2RDVqN2N6NFpUVTQ5NkRQZEFKQTQ1ZURzcEZESjlqdU5PYmVLV3Z6UzVMaEx0dC8rQWZZQzJzc1NDVDF3Y0NHcXVZNG5RTHVaYTBKdGIyRmVtOUVlMENmQ1JJMkFMU0c3VEhJWEZ4czBPK2t5TnIzdUV3cVZ2RE5vSnI2NCtGb3ZDbVE5YjJBamZCWkt6ZzdWNUV1MDI4Nk85NUY2L1pNZDF6V0Q1dzBaek9QbE0reHBJOGNTYWZ6Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40559fdf-ac30-44d6-bde1-d3680b7d2745", "record_id": "flaws_cloudtrail:0000437:40559fdf-ac30-44d6-bde1-d3680b7d2745", "row_index": 437, "timestamp": "2019-05-15T11:35:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40559fdf-ac30-44d6-bde1-d3680b7d2745", "eventTime": "2019-05-15T11:35:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRM29CRHVnUUNtSFpEaktqZUNLTjV2Z3Jtc1pLRHMwNGw3dXJWUGlRaElOWEZORm42RFFyZXdIZENDd2RZOWhoT0Z1cWRCY25Gb2g1eHl6VldhNDhpbDhPcVRXNnNSZjU3VndoZ3N0ZkllbXpOMjRtUFV6NDdwOGZRbWp5S0xFOWdQT1BXVUo2d2M5R1MzNElvZHBLQXc0TXZuZ2s2ek1lU0RaQ2x4clFucDN1REpsT3BNNGxiUlE5bUZYcjBiUEJGejdOREtFeiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40559fdf-ac30-44d6-bde1-d3680b7d2745", "record_id": "flaws_cloudtrail:0000438:40559fdf-ac30-44d6-bde1-d3680b7d2745", "row_index": 438, "timestamp": "2019-05-15T11:35:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40559fdf-ac30-44d6-bde1-d3680b7d2745", "eventTime": "2019-05-15T11:35:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRM29CRHVnUUNtSFpEaktqZUNLTjV2Z3Jtc1pLRHMwNGw3dXJWUGlRaElOWEZORm42RFFyZXdIZENDd2RZOWhoT0Z1cWRCY25Gb2g1eHl6VldhNDhpbDhPcVRXNnNSZjU3VndoZ3N0ZkllbXpOMjRtUFV6NDdwOGZRbWp5S0xFOWdQT1BXVUo2d2M5R1MzNElvZHBLQXc0TXZuZ2s2ek1lU0RaQ2x4clFucDN1REpsT3BNNGxiUlE5bUZYcjBiUEJGejdOREtFeiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a61096-70f7-4f77-b06e-10bfa74a2a03", "record_id": "flaws_cloudtrail:0000439:8a61096-70f7-4f77-b06e-10bfa74a2a03", "row_index": 439, "timestamp": "2019-05-15T11:35:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a61096-70f7-4f77-b06e-10bfa74a2a03", "eventTime": "2019-05-15T11:35:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuakJkL0xBVGhmeVVFTE1mZmhiTHlvaXlPMnp3WUduZ1ROZGVnekZQQzFONzJLL3NZbUtjaVFoT2JIRGEwRFlQaXkxeUdDK09qZUZwSEpMbCtIeG5xMTlDNGQyVHlNQTJQY3dGbHE2MkxNdE0xRlRiSEtXTTZad3N2WktTcXd5RXhZd2RiWkU2d0Q2NjdqcE5YdEx1cTByVGRoNk5kWXFhRjNwdE5OQ1BlWWYxNUl2WE9MZXlEV21Qd3hCQmhGeSs1S3NxSGFEZzZrdUdFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a61096-70f7-4f77-b06e-10bfa74a2a03", "record_id": "flaws_cloudtrail:0000440:8a61096-70f7-4f77-b06e-10bfa74a2a03", "row_index": 440, "timestamp": "2019-05-15T11:35:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a61096-70f7-4f77-b06e-10bfa74a2a03", "eventTime": "2019-05-15T11:35:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuakJkL0xBVGhmeVVFTE1mZmhiTHlvaXlPMnp3WUduZ1ROZGVnekZQQzFONzJLL3NZbUtjaVFoT2JIRGEwRFlQaXkxeUdDK09qZUZwSEpMbCtIeG5xMTlDNGQyVHlNQTJQY3dGbHE2MkxNdE0xRlRiSEtXTTZad3N2WktTcXd5RXhZd2RiWkU2d0Q2NjdqcE5YdEx1cTByVGRoNk5kWXFhRjNwdE5OQ1BlWWYxNUl2WE9MZXlEV21Qd3hCQmhGeSs1S3NxSGFEZzZrdUdFUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d156f986-09ec-4371-a966-34bf552e0312", "record_id": "flaws_cloudtrail:0000441:d156f986-09ec-4371-a966-34bf552e0312", "row_index": 441, "timestamp": "2019-05-15T11:35:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d156f986-09ec-4371-a966-34bf552e0312", "eventTime": "2019-05-15T11:35:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONjZQQVlzT08zN241ZVA1YXV3RThLTzlXUjc3RWN1TDdnWGNsSk1HVmk0eFFyV3RtNGtaQXduSk14Y241bEc4ZFp1VlRtakM4bmpjQjI0bEQrQWpMYkNRRXNaNE1HVVd4UWdINXlZT1BOY0VBbmpSdWVET1pGdVhmOW0wOHJhTURoaWZ4TVh1N1FseHdSeWhnZElBN3l2NjdmZFZMbXNzdGZQazRCd0xVS0lqcHIvYnNCVzRpZzZ5NHlzNVh2TXpyc2ltSytnSFpwcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d156f986-09ec-4371-a966-34bf552e0312", "record_id": "flaws_cloudtrail:0000442:d156f986-09ec-4371-a966-34bf552e0312", "row_index": 442, "timestamp": "2019-05-15T11:35:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d156f986-09ec-4371-a966-34bf552e0312", "eventTime": "2019-05-15T11:35:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJONjZQQVlzT08zN241ZVA1YXV3RThLTzlXUjc3RWN1TDdnWGNsSk1HVmk0eFFyV3RtNGtaQXduSk14Y241bEc4ZFp1VlRtakM4bmpjQjI0bEQrQWpMYkNRRXNaNE1HVVd4UWdINXlZT1BOY0VBbmpSdWVET1pGdVhmOW0wOHJhTURoaWZ4TVh1N1FseHdSeWhnZElBN3l2NjdmZFZMbXNzdGZQazRCd0xVS0lqcHIvYnNCVzRpZzZ5NHlzNVh2TXpyc2ltSytnSFpwcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d45e5c68-3f47-4db8-8c88-370c3f45137b", "record_id": "flaws_cloudtrail:0000443:d45e5c68-3f47-4db8-8c88-370c3f45137b", "row_index": 443, "timestamp": "2019-05-15T11:35:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d45e5c68-3f47-4db8-8c88-370c3f45137b", "eventTime": "2019-05-15T11:35:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFSk94dXVLYmRoM0lXK1lXUXhlaEFtbU9uSCt2NHpndnZJRm96bllUck8wc05TcUN3U2lKd0JGV2hic0ozclJXQVZ0SmZrYU5hendVd2owNU15akxxV2hMcHhrL2pLbUxMV3B5U0pwRG5MUEhwZmNJNFVWU21pZGhyaUJNUlZqV2Uzb1J0bStwcmdJa1p5YWI2Rk05QmxKbTRvZzBRMjFWUFlHN09OcGdTckpTSTlLa0J6c0s1MUZZWWtCNzlES1c4Q3N5bExXeGJhQzUxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d45e5c68-3f47-4db8-8c88-370c3f45137b", "record_id": "flaws_cloudtrail:0000444:d45e5c68-3f47-4db8-8c88-370c3f45137b", "row_index": 444, "timestamp": "2019-05-15T11:35:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d45e5c68-3f47-4db8-8c88-370c3f45137b", "eventTime": "2019-05-15T11:35:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFSk94dXVLYmRoM0lXK1lXUXhlaEFtbU9uSCt2NHpndnZJRm96bllUck8wc05TcUN3U2lKd0JGV2hic0ozclJXQVZ0SmZrYU5hendVd2owNU15akxxV2hMcHhrL2pLbUxMV3B5U0pwRG5MUEhwZmNJNFVWU21pZGhyaUJNUlZqV2Uzb1J0bStwcmdJa1p5YWI2Rk05QmxKbTRvZzBRMjFWUFlHN09OcGdTckpTSTlLa0J6c0s1MUZZWWtCNzlES1c4Q3N5bExXeGJhQzUxQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a5fe5a9-2952-48fe-a21e-8bd8547a994a", "record_id": "flaws_cloudtrail:0000445:5a5fe5a9-2952-48fe-a21e-8bd8547a994a", "row_index": 445, "timestamp": "2019-05-15T11:35:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a5fe5a9-2952-48fe-a21e-8bd8547a994a", "eventTime": "2019-05-15T11:35:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiYlN4TWdrTWRIeEh5RTdHb3laRy8yeWhnejBlYlVmNldaSVlJRVIvb2I4NHhpT1d3Qm9UY1FwbXZsRW9JUHc5cXRrL3htWHFVNXNKM2k5UStIOU9WdkZMblllQ3J5c2E2dzRGZ1FPY3pXa3M3U0tvTGo2anhnV21KSkJQT1FHMU5yaVBzalM1bGVldjgva3FsT3lla05xR1FpdHQ5Z2tXVHpYZmljRnR0cTFUM1FCWmhuc0ZqaitNUDl0ZVJsSWpQOXV1T2ZYTFhkL2JkQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a5fe5a9-2952-48fe-a21e-8bd8547a994a", "record_id": "flaws_cloudtrail:0000446:5a5fe5a9-2952-48fe-a21e-8bd8547a994a", "row_index": 446, "timestamp": "2019-05-15T11:35:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a5fe5a9-2952-48fe-a21e-8bd8547a994a", "eventTime": "2019-05-15T11:35:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiYlN4TWdrTWRIeEh5RTdHb3laRy8yeWhnejBlYlVmNldaSVlJRVIvb2I4NHhpT1d3Qm9UY1FwbXZsRW9JUHc5cXRrL3htWHFVNXNKM2k5UStIOU9WdkZMblllQ3J5c2E2dzRGZ1FPY3pXa3M3U0tvTGo2anhnV21KSkJQT1FHMU5yaVBzalM1bGVldjgva3FsT3lla05xR1FpdHQ5Z2tXVHpYZmljRnR0cTFUM1FCWmhuc0ZqaitNUDl0ZVJsSWpQOXV1T2ZYTFhkL2JkQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea489df-f2f7-4066-9053-1b03cfcaa3ea", "record_id": "flaws_cloudtrail:0000447:1ea489df-f2f7-4066-9053-1b03cfcaa3ea", "row_index": 447, "timestamp": "2019-05-15T11:35:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea489df-f2f7-4066-9053-1b03cfcaa3ea", "eventTime": "2019-05-15T11:35:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3VEtaQjcyWm9LK1dyYUtRUUg5eGtnSldRQkZGcHNjZ0ZETUYyTk5xWjhsQk82TVlDeTBGckJsbjh4L0tzT0M2aXhzeVp3RHJjbHp4cldFVW9FV1JTN1V3VmY1MkJQUnRnNjFqdEg2UjYyWjFWWTRSeUt1RmlqMWRiTHkzeitNY2ZBYWVVcDJBdnFqN1J0WVFPY1lOQ2FIK1U0MFNqOTRsY2JGU0d2SklwUU16a0I0R3dmS29aZ3FVanZ4cTJNekVDSWdFVmdyMHJEMFhadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea489df-f2f7-4066-9053-1b03cfcaa3ea", "record_id": "flaws_cloudtrail:0000448:1ea489df-f2f7-4066-9053-1b03cfcaa3ea", "row_index": 448, "timestamp": "2019-05-15T11:35:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea489df-f2f7-4066-9053-1b03cfcaa3ea", "eventTime": "2019-05-15T11:35:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3VEtaQjcyWm9LK1dyYUtRUUg5eGtnSldRQkZGcHNjZ0ZETUYyTk5xWjhsQk82TVlDeTBGckJsbjh4L0tzT0M2aXhzeVp3RHJjbHp4cldFVW9FV1JTN1V3VmY1MkJQUnRnNjFqdEg2UjYyWjFWWTRSeUt1RmlqMWRiTHkzeitNY2ZBYWVVcDJBdnFqN1J0WVFPY1lOQ2FIK1U0MFNqOTRsY2JGU0d2SklwUU16a0I0R3dmS29aZ3FVanZ4cTJNekVDSWdFVmdyMHJEMFhadz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe7eb09-3783-4cbb-805a-ee77d05c8674", "record_id": "flaws_cloudtrail:0000449:dfe7eb09-3783-4cbb-805a-ee77d05c8674", "row_index": 449, "timestamp": "2019-05-15T11:35:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe7eb09-3783-4cbb-805a-ee77d05c8674", "eventTime": "2019-05-15T11:35:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBZ0VjTFd6S2tOK04rb3ZXZ3R6eGUvY0g4Mm40ZVlTNkIyMFM4Q0YvQkVROWZiRjhKVEpzRDQwRzVPVGltWWI3ZmlTQWs2R3NWOGVxVG9vSlFXQWlmbDlRaGRuSEgwSEJDaE5uUU9Ya1R6K3YyQ3JRcTFFMXI2Z01vbVViWHg4azhyTTgvNEZXbHJWekJGSnpsTS9MaVFUcmdFQTNZZHVWeno1ZElKQXQzOXFBdlpZZ0Z6bjNOaWFjSDJ3cCtnT3JsRTBaN3FKMGlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfe7eb09-3783-4cbb-805a-ee77d05c8674", "record_id": "flaws_cloudtrail:0000450:dfe7eb09-3783-4cbb-805a-ee77d05c8674", "row_index": 450, "timestamp": "2019-05-15T11:35:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfe7eb09-3783-4cbb-805a-ee77d05c8674", "eventTime": "2019-05-15T11:35:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBZ0VjTFd6S2tOK04rb3ZXZ3R6eGUvY0g4Mm40ZVlTNkIyMFM4Q0YvQkVROWZiRjhKVEpzRDQwRzVPVGltWWI3ZmlTQWs2R3NWOGVxVG9vSlFXQWlmbDlRaGRuSEgwSEJDaE5uUU9Ya1R6K3YyQ3JRcTFFMXI2Z01vbVViWHg4azhyTTgvNEZXbHJWekJGSnpsTS9MaVFUcmdFQTNZZHVWeno1ZElKQXQzOXFBdlpZZ0Z6bjNOaWFjSDJ3cCtnT3JsRTBaN3FKMGlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8e1d5e3-a038-49b5-8622-7ee30a577733e", "record_id": "flaws_cloudtrail:0000451:b8e1d5e3-a038-49b5-8622-7ee30a577733e", "row_index": 451, "timestamp": "2019-05-15T11:35:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8e1d5e3-a038-49b5-8622-7ee30a577733e", "eventTime": "2019-05-15T11:35:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNSW1xV2VmUnJqS08zVnlkMEpUclg5clNrZ1RNd2NXSm1GOHMrdXVNV2RhbzNQNmVhMzlnWmdRODhRb2w1QmgzbDVlQ1VPVS9hMmhlKzVISmI5QUtSQ1ZQN2xFOVFtdm9JMlZCVzRLOThkRzNzYU9aNzlVc3A5VUxoSXRLRkUvcHJROVc2aEhVSnR1TS9jMDdmaXl3T1NmZjVoV1Z1S05hekFabGJCRUw5cDNuZ1pRQ3FNejhWL3U4OFh3SXprb3NGTGJIemVyZkJHZ0JhQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8e1d5e3-a038-49b5-8622-7ee30a577733e", "record_id": "flaws_cloudtrail:0000452:b8e1d5e3-a038-49b5-8622-7ee30a577733e", "row_index": 452, "timestamp": "2019-05-15T11:35:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8e1d5e3-a038-49b5-8622-7ee30a577733e", "eventTime": "2019-05-15T11:35:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNSW1xV2VmUnJqS08zVnlkMEpUclg5clNrZ1RNd2NXSm1GOHMrdXVNV2RhbzNQNmVhMzlnWmdRODhRb2w1QmgzbDVlQ1VPVS9hMmhlKzVISmI5QUtSQ1ZQN2xFOVFtdm9JMlZCVzRLOThkRzNzYU9aNzlVc3A5VUxoSXRLRkUvcHJROVc2aEhVSnR1TS9jMDdmaXl3T1NmZjVoV1Z1S05hekFabGJCRUw5cDNuZ1pRQ3FNejhWL3U4OFh3SXprb3NGTGJIemVyZkJHZ0JhQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e5b2c9-000e-4393-a2e2-469473ad6f9a3", "record_id": "flaws_cloudtrail:0000453:76e5b2c9-000e-4393-a2e2-469473ad6f9a3", "row_index": 453, "timestamp": "2019-05-15T11:35:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e5b2c9-000e-4393-a2e2-469473ad6f9a3", "eventTime": "2019-05-15T11:35:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVkZvdmNVTitMVllhRStNM3FvQjhnbXBwaUFiejkyS1hvWjQwWUIvQUUyd3UxK25oMG1FMnNReWVUb1lWSXN0bVF1TVVvRklmdEZmdVplb2pDeXl1WmZ1by8vcmFZYmtXa0dPVUVPZGdRZ3RVY1Btc1AzelRoRFZHRVB3ZzFFVW53dXNEMlRhTDNhZ2N0MnMycXM1RjBNOXNLbnhjN085YldNanU3OTVDbTRWTFFBQUFQOEU4bGNwRTRSZVdPUXNWdHNJeGhrVU1RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e5b2c9-000e-4393-a2e2-469473ad6f9a3", "record_id": "flaws_cloudtrail:0000454:76e5b2c9-000e-4393-a2e2-469473ad6f9a3", "row_index": 454, "timestamp": "2019-05-15T11:35:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e5b2c9-000e-4393-a2e2-469473ad6f9a3", "eventTime": "2019-05-15T11:35:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhVkZvdmNVTitMVllhRStNM3FvQjhnbXBwaUFiejkyS1hvWjQwWUIvQUUyd3UxK25oMG1FMnNReWVUb1lWSXN0bVF1TVVvRklmdEZmdVplb2pDeXl1WmZ1by8vcmFZYmtXa0dPVUVPZGdRZ3RVY1Btc1AzelRoRFZHRVB3ZzFFVW53dXNEMlRhTDNhZ2N0MnMycXM1RjBNOXNLbnhjN085YldNanU3OTVDbTRWTFFBQUFQOEU4bGNwRTRSZVdPUXNWdHNJeGhrVU1RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ccd38c5-fd84-443b-bfbf-805ee9a36ebb", "record_id": "flaws_cloudtrail:0000455:2ccd38c5-fd84-443b-bfbf-805ee9a36ebb", "row_index": 455, "timestamp": "2019-05-15T11:35:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ccd38c5-fd84-443b-bfbf-805ee9a36ebb", "eventTime": "2019-05-15T11:35:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyTjAwZ3loSWRBSEFUT0IxdnRLRjVLV1dNVVhEMkN3MnBUb3ZEQ05qM0pRSDM3RDVXWTNoSUpIWVdjcnVVQzVUNkdIVlRvcUtuMWdLT1BnZkZqcW5CWHB1NXNlSmVTQ0dDbWxCSDlHZkI4eVphbEErMXJ1T1g5ckZUVXFkd0JTWUZPcW96K2N3UXpDZUJnS0NmRUZiTW1rTlpFSlo0K1BLdk1WVmxnRGg0a2hIOUZvNkt0NlViK3dYMnhqMUw3KzhZVTNxZ3M3UW1hTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ccd38c5-fd84-443b-bfbf-805ee9a36ebb", "record_id": "flaws_cloudtrail:0000456:2ccd38c5-fd84-443b-bfbf-805ee9a36ebb", "row_index": 456, "timestamp": "2019-05-15T11:35:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ccd38c5-fd84-443b-bfbf-805ee9a36ebb", "eventTime": "2019-05-15T11:35:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyTjAwZ3loSWRBSEFUT0IxdnRLRjVLV1dNVVhEMkN3MnBUb3ZEQ05qM0pRSDM3RDVXWTNoSUpIWVdjcnVVQzVUNkdIVlRvcUtuMWdLT1BnZkZqcW5CWHB1NXNlSmVTQ0dDbWxCSDlHZkI4eVphbEErMXJ1T1g5ckZUVXFkd0JTWUZPcW96K2N3UXpDZUJnS0NmRUZiTW1rTlpFSlo0K1BLdk1WVmxnRGg0a2hIOUZvNkt0NlViK3dYMnhqMUw3KzhZVTNxZ3M3UW1hTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8649e59-2262-4007-bb59-5d2ebcf762a3", "record_id": "flaws_cloudtrail:0000457:d8649e59-2262-4007-bb59-5d2ebcf762a3", "row_index": 457, "timestamp": "2019-05-15T11:35:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8649e59-2262-4007-bb59-5d2ebcf762a3", "eventTime": "2019-05-15T11:35:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4aWlQbzNZSkhIZDcwY0s5eUlmUjRJWHdsSW1rOFRXT3hqd0NkZGxDZWdZL0pBSVhtbHJ5RVJFNjBTazBIcE1vUVNZYkhPYk5MUXF3VTZBRjlsbmFFSGNINWVmSkx5WnE3a0c5NjA3UFJzYnVuS1liUG9UUmV0K1ljRC9QTDAzM2VyQjFNeHRJb2xTYnZvQzhENEFTc2w0U0plSSt6eTdZMTlzUUl6R2ViYmdXVWZrM20xSlFYbllOOGFoOTVnN0luMm9iRXhPa2djeG9ORUR2ckx0SlphbGprR3F3eEEwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8649e59-2262-4007-bb59-5d2ebcf762a3", "record_id": "flaws_cloudtrail:0000458:d8649e59-2262-4007-bb59-5d2ebcf762a3", "row_index": 458, "timestamp": "2019-05-15T11:35:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8649e59-2262-4007-bb59-5d2ebcf762a3", "eventTime": "2019-05-15T11:35:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4aWlQbzNZSkhIZDcwY0s5eUlmUjRJWHdsSW1rOFRXT3hqd0NkZGxDZWdZL0pBSVhtbHJ5RVJFNjBTazBIcE1vUVNZYkhPYk5MUXF3VTZBRjlsbmFFSGNINWVmSkx5WnE3a0c5NjA3UFJzYnVuS1liUG9UUmV0K1ljRC9QTDAzM2VyQjFNeHRJb2xTYnZvQzhENEFTc2w0U0plSSt6eTdZMTlzUUl6R2ViYmdXVWZrM20xSlFYbllOOGFoOTVnN0luMm9iRXhPa2djeG9ORUR2ckx0SlphbGprR3F3eEEwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34f051e6-1fd5-499a-a627-ca5f52dfb262", "record_id": "flaws_cloudtrail:0000459:34f051e6-1fd5-499a-a627-ca5f52dfb262", "row_index": 459, "timestamp": "2019-05-15T11:35:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34f051e6-1fd5-499a-a627-ca5f52dfb262", "eventTime": "2019-05-15T11:35:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVdHNVNTRMcEhpQjl1ZC95UG9CR29HQjRBR3lETStJMWNaQ05jaDdTb0VUYUhMOXhpSzI3OGZkT0VrcitKVjlqcXk5Tko4eFBYcFhTK1kwbmRJY2EzZTFtZk5DSGhqTUszRG1KNlY0cDVNUWI4bFkrVUx1d1dtbkJPTkUrb1BubWp6VEFGZVI4Z0QzTW5iR3pzdVlNYnBUMVZ2dnlGZnZpV0dpWFF1UHZPUEkrb3ZYeGY1UmlEODlJMnhvanM5ZmJDWFlNc1pHdDA2QXZBaFBGWks4bjJMRm1FUWNGVHUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d118a1da-92f7-47ef-8806-5a13562", "record_id": "flaws_cloudtrail:0000460:d118a1da-92f7-47ef-8806-5a13562", "row_index": 460, "timestamp": "2019-05-15T11:35:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d118a1da-92f7-47ef-8806-5a13562", "eventTime": "2019-05-15T11:35:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrQnk5NkxpaitMWFA0b1ZvZXhHQmg2bFBvVjIwVXhnSEF1NlU1MThNTFo0NUdYT3NXQ1hFVHF3aFFpUTJhTDZ3NGV2aXNBNnJCMlpiV0NuK09nT1p6dVVPMHlHR1hJR0kwS2hUbWtqK1hXZUxCc2JSbkVHV3VSdkpKaVRtdzZsVHV1QnZWT2hscnpPTzZuVUltVnVkNTlPdDlmVHpMUHlkYWo1N1k1ZnFwc2xZRkdXMGd1V2N1OVRkVVNXbjV2Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34f051e6-1fd5-499a-a627-ca5f52dfb262", "record_id": "flaws_cloudtrail:0000461:34f051e6-1fd5-499a-a627-ca5f52dfb262", "row_index": 461, "timestamp": "2019-05-15T11:35:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34f051e6-1fd5-499a-a627-ca5f52dfb262", "eventTime": "2019-05-15T11:35:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVdHNVNTRMcEhpQjl1ZC95UG9CR29HQjRBR3lETStJMWNaQ05jaDdTb0VUYUhMOXhpSzI3OGZkT0VrcitKVjlqcXk5Tko4eFBYcFhTK1kwbmRJY2EzZTFtZk5DSGhqTUszRG1KNlY0cDVNUWI4bFkrVUx1d1dtbkJPTkUrb1BubWp6VEFGZVI4Z0QzTW5iR3pzdVlNYnBUMVZ2dnlGZnZpV0dpWFF1UHZPUEkrb3ZYeGY1UmlEODlJMnhvanM5ZmJDWFlNc1pHdDA2QXZBaFBGWks4bjJMRm1FUWNGVHUwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d118a1da-92f7-47ef-8806-5a13562", "record_id": "flaws_cloudtrail:0000462:d118a1da-92f7-47ef-8806-5a13562", "row_index": 462, "timestamp": "2019-05-15T11:35:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d118a1da-92f7-47ef-8806-5a13562", "eventTime": "2019-05-15T11:35:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrQnk5NkxpaitMWFA0b1ZvZXhHQmg2bFBvVjIwVXhnSEF1NlU1MThNTFo0NUdYT3NXQ1hFVHF3aFFpUTJhTDZ3NGV2aXNBNnJCMlpiV0NuK09nT1p6dVVPMHlHR1hJR0kwS2hUbWtqK1hXZUxCc2JSbkVHV3VSdkpKaVRtdzZsVHV1QnZWT2hscnpPTzZuVUltVnVkNTlPdDlmVHpMUHlkYWo1N1k1ZnFwc2xZRkdXMGd1V2N1OVRkVVNXbjV2Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6af518-a5d0-4fb3-a349-f19ed02ea686", "record_id": "flaws_cloudtrail:0000463:ae6af518-a5d0-4fb3-a349-f19ed02ea686", "row_index": 463, "timestamp": "2019-05-15T11:35:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6af518-a5d0-4fb3-a349-f19ed02ea686", "eventTime": "2019-05-15T11:35:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNnBtMU1WUmNISXZLNjEvRDUrNENNUnl4UUhKMWNDazBZOG41cW1OR3V0bEh6TGFBUnZSUXFaUHlOWHVlYkUwUXJxQjVXcks0dlB5YnBnb2lHN3VSRVBsc3ZpeWxFcFZNVEhtUU5KZ05ad2tUeXp1cGR0dkJqSk1Ub0phRkQ0bU5EcFJrNktpcEZNb0llS3RPVVdyV2pkQWg3NkoxYTlDbnFMMmpsRmZTbTFMWVJjNWdCbjNTN3JGOFh5Lzd2K2xOdUQzY3ppa21wOWp4WmVWWldvRFVFTnp6Z1FUWWZFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae6af518-a5d0-4fb3-a349-f19ed02ea686", "record_id": "flaws_cloudtrail:0000464:ae6af518-a5d0-4fb3-a349-f19ed02ea686", "row_index": 464, "timestamp": "2019-05-15T11:35:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae6af518-a5d0-4fb3-a349-f19ed02ea686", "eventTime": "2019-05-15T11:35:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoNnBtMU1WUmNISXZLNjEvRDUrNENNUnl4UUhKMWNDazBZOG41cW1OR3V0bEh6TGFBUnZSUXFaUHlOWHVlYkUwUXJxQjVXcks0dlB5YnBnb2lHN3VSRVBsc3ZpeWxFcFZNVEhtUU5KZ05ad2tUeXp1cGR0dkJqSk1Ub0phRkQ0bU5EcFJrNktpcEZNb0llS3RPVVdyV2pkQWg3NkoxYTlDbnFMMmpsRmZTbTFMWVJjNWdCbjNTN3JGOFh5Lzd2K2xOdUQzY3ppa21wOWp4WmVWWldvRFVFTnp6Z1FUWWZFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c202472a8-3092-4736-a570-7d18709e0116", "record_id": "flaws_cloudtrail:0000465:c202472a8-3092-4736-a570-7d18709e0116", "row_index": 465, "timestamp": "2019-05-15T11:35:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c202472a8-3092-4736-a570-7d18709e0116", "eventTime": "2019-05-15T11:35:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoaXlPSmRiWjNidzdNam1KN3ZYdVRkL0Y5TGdiZlBrR3l3aUtETjZqVEVyMXhwT3dGVDZzV0V3UXNOamhIVGZYODFIMkxncG45Uk14eVlQS1RrRmZ0Nkk2aGZRUU0xVnJ2di9mUVdPLzFDZmdzVE1DdGYxdGJSVFowZGZ6aU9sLzhybENhRFNTRW41Z2J2UzZZL3MvcGZwWUszcmJON1lkN1loM2Zsa0hxcytjSUZEdmJLeHdCV3lOTTN2cTA3bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c202472a8-3092-4736-a570-7d18709e0116", "record_id": "flaws_cloudtrail:0000466:c202472a8-3092-4736-a570-7d18709e0116", "row_index": 466, "timestamp": "2019-05-15T11:35:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c202472a8-3092-4736-a570-7d18709e0116", "eventTime": "2019-05-15T11:35:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoaXlPSmRiWjNidzdNam1KN3ZYdVRkL0Y5TGdiZlBrR3l3aUtETjZqVEVyMXhwT3dGVDZzV0V3UXNOamhIVGZYODFIMkxncG45Uk14eVlQS1RrRmZ0Nkk2aGZRUU0xVnJ2di9mUVdPLzFDZmdzVE1DdGYxdGJSVFowZGZ6aU9sLzhybENhRFNTRW41Z2J2UzZZL3MvcGZwWUszcmJON1lkN1loM2Zsa0hxcytjSUZEdmJLeHdCV3lOTTN2cTA3bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a60948-255c-44fa-8c70-33e09fafacaf", "record_id": "flaws_cloudtrail:0000467:0a60948-255c-44fa-8c70-33e09fafacaf", "row_index": 467, "timestamp": "2019-05-15T11:36:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a60948-255c-44fa-8c70-33e09fafacaf", "eventTime": "2019-05-15T11:36:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIySGVOWGU5QUpmMEdYanJYekFjdVIwRlQ1bnNKZkwwZ0FlT2tpdHpnRzVmVWN5MDVoQWtEVnN2SmkzT3dIQ29oa2h4WWsvUmNjWTg1RDkxeTUzTWlIM1ZFSjZoUlpKSkRDZ1ZpWkdTdWdzSk84Nk44R2xucHNBL0tQeE01My9LTld0OW5UTTNJcFpDVHRlUldXcHljRUlJTXRLUnY1MHlUN05DbVBKTEJKZGF1L1pLMUJibTBwaTdTMzJCRkhTUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "860548bf-d402-4f94-a9a1-a4e85c20b058", "record_id": "flaws_cloudtrail:0000468:860548bf-d402-4f94-a9a1-a4e85c20b058", "row_index": 468, "timestamp": "2019-05-15T11:36:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "860548bf-d402-4f94-a9a1-a4e85c20b058", "eventTime": "2019-05-15T11:36:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiRmpxb2VPMGl5QmZ5NzZROVJIQkx6THBUME9qa0U3eEN3dSt2UzRud2pkTW5IRVJNNkRYM2FDdnNWeGdhTXlURjJIMW1Oc3p2azdhQlJJQmlIdXNqYzdEYmR6ZjZqS3NpM0x3ZUlTbDZBcEVsSVVOOTBFYTluT1ZTbTJjbG1HcW55aldXQzU3T0JLSDlEckJ3K3l1R1lULzhYV0dxUnlHQ0d4NXlUK2xycTNRandjbXMyZVZ1Wi9PdnRleFY3VXJzVTJSVlY4bE5vb0VvSDAxTU1PZmg5WStZbG5xKzZNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a60948-255c-44fa-8c70-33e09fafacaf", "record_id": "flaws_cloudtrail:0000469:0a60948-255c-44fa-8c70-33e09fafacaf", "row_index": 469, "timestamp": "2019-05-15T11:36:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a60948-255c-44fa-8c70-33e09fafacaf", "eventTime": "2019-05-15T11:36:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIySGVOWGU5QUpmMEdYanJYekFjdVIwRlQ1bnNKZkwwZ0FlT2tpdHpnRzVmVWN5MDVoQWtEVnN2SmkzT3dIQ29oa2h4WWsvUmNjWTg1RDkxeTUzTWlIM1ZFSjZoUlpKSkRDZ1ZpWkdTdWdzSk84Nk44R2xucHNBL0tQeE01My9LTld0OW5UTTNJcFpDVHRlUldXcHljRUlJTXRLUnY1MHlUN05DbVBKTEJKZGF1L1pLMUJibTBwaTdTMzJCRkhTUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "860548bf-d402-4f94-a9a1-a4e85c20b058", "record_id": "flaws_cloudtrail:0000470:860548bf-d402-4f94-a9a1-a4e85c20b058", "row_index": 470, "timestamp": "2019-05-15T11:36:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "860548bf-d402-4f94-a9a1-a4e85c20b058", "eventTime": "2019-05-15T11:36:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiRmpxb2VPMGl5QmZ5NzZROVJIQkx6THBUME9qa0U3eEN3dSt2UzRud2pkTW5IRVJNNkRYM2FDdnNWeGdhTXlURjJIMW1Oc3p2azdhQlJJQmlIdXNqYzdEYmR6ZjZqS3NpM0x3ZUlTbDZBcEVsSVVOOTBFYTluT1ZTbTJjbG1HcW55aldXQzU3T0JLSDlEckJ3K3l1R1lULzhYV0dxUnlHQ0d4NXlUK2xycTNRandjbXMyZVZ1Wi9PdnRleFY3VXJzVTJSVlY4bE5vb0VvSDAxTU1PZmg5WStZbG5xKzZNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8118eaf3-b696-4b83-adc6-2e0e8f094599b", "record_id": "flaws_cloudtrail:0000471:8118eaf3-b696-4b83-adc6-2e0e8f094599b", "row_index": 471, "timestamp": "2019-05-15T11:36:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8118eaf3-b696-4b83-adc6-2e0e8f094599b", "eventTime": "2019-05-15T11:36:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDNVR4b2NaN0MvbnRNbitGRUNoa3hTNkZyMzMxYmNaQmN3a0YyVlREOXlBVFlKK1ZaYm9xSXQwdW90UE1kVHZvaDNMSWQvNS9lb2docGlWNEtZQnBhcDU0MEdkNm5iSW40WEJWcjVNY1lqT0NCTlU0cmNDLzNxSWluL1RZQmJNWmRNNHlQWTgwVEowUDhzOUJsS3lGTTIxbXVFeGpwdkc0YzA5NEFuVTlJOHhHK052RFdiOG9vZ3R0VHVJY1RmU0dXR3ZzSUhMMS9jMUhqQThQT0t4aHhvOEs3NUxKTTJnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8118eaf3-b696-4b83-adc6-2e0e8f094599b", "record_id": "flaws_cloudtrail:0000472:8118eaf3-b696-4b83-adc6-2e0e8f094599b", "row_index": 472, "timestamp": "2019-05-15T11:36:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8118eaf3-b696-4b83-adc6-2e0e8f094599b", "eventTime": "2019-05-15T11:36:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDNVR4b2NaN0MvbnRNbitGRUNoa3hTNkZyMzMxYmNaQmN3a0YyVlREOXlBVFlKK1ZaYm9xSXQwdW90UE1kVHZvaDNMSWQvNS9lb2docGlWNEtZQnBhcDU0MEdkNm5iSW40WEJWcjVNY1lqT0NCTlU0cmNDLzNxSWluL1RZQmJNWmRNNHlQWTgwVEowUDhzOUJsS3lGTTIxbXVFeGpwdkc0YzA5NEFuVTlJOHhHK052RFdiOG9vZ3R0VHVJY1RmU0dXR3ZzSUhMMS9jMUhqQThQT0t4aHhvOEs3NUxKTTJnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64506ca-e85c-445c-8624-9d82072d2", "record_id": "flaws_cloudtrail:0000473:64506ca-e85c-445c-8624-9d82072d2", "row_index": 473, "timestamp": "2019-05-15T11:36:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64506ca-e85c-445c-8624-9d82072d2", "eventTime": "2019-05-15T11:36:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSTHcycFZPV3VZM3FBNjNSNjNUbjNvSERpTTJ5eHc4MTFKZWdKOUxISWFkc0ZGUHhaaHZHWitVUFpiSGsvWmVSNVp2RkV3ZjQ1UHI3VEhHeGlHNWNiRkRJSFRlN0FBNlRralVEdG9lUUltOTJKWDNqOVU2MmpzQnlLeWU1RzlCMm9yenE5SWpYVm9FZ3VVUnQ0RTlsNmZraHdZMTV5VVEzZFhYOVJzT1ltQUxnT3dJalNqa2szRjNTMUZKTXZMND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64506ca-e85c-445c-8624-9d82072d2", "record_id": "flaws_cloudtrail:0000474:64506ca-e85c-445c-8624-9d82072d2", "row_index": 474, "timestamp": "2019-05-15T11:36:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64506ca-e85c-445c-8624-9d82072d2", "eventTime": "2019-05-15T11:36:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSTHcycFZPV3VZM3FBNjNSNjNUbjNvSERpTTJ5eHc4MTFKZWdKOUxISWFkc0ZGUHhaaHZHWitVUFpiSGsvWmVSNVp2RkV3ZjQ1UHI3VEhHeGlHNWNiRkRJSFRlN0FBNlRralVEdG9lUUltOTJKWDNqOVU2MmpzQnlLeWU1RzlCMm9yenE5SWpYVm9FZ3VVUnQ0RTlsNmZraHdZMTV5VVEzZFhYOVJzT1ltQUxnT3dJalNqa2szRjNTMUZKTXZMND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c242ef19-a4d9-48d9-a0cd-126cddbba4a5", "record_id": "flaws_cloudtrail:0000475:c242ef19-a4d9-48d9-a0cd-126cddbba4a5", "row_index": 475, "timestamp": "2019-05-15T11:38:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c242ef19-a4d9-48d9-a0cd-126cddbba4a5", "eventTime": "2019-05-15T11:38:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c242ef19-a4d9-48d9-a0cd-126cddbba4a5", "record_id": "flaws_cloudtrail:0000476:c242ef19-a4d9-48d9-a0cd-126cddbba4a5", "row_index": 476, "timestamp": "2019-05-15T11:38:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c242ef19-a4d9-48d9-a0cd-126cddbba4a5", "eventTime": "2019-05-15T11:38:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c52da9-8d65-4399-931b-9e86dcd20ff8", "record_id": "flaws_cloudtrail:0000477:b1c52da9-8d65-4399-931b-9e86dcd20ff8", "row_index": 477, "timestamp": "2019-05-15T11:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c52da9-8d65-4399-931b-9e86dcd20ff8", "eventTime": "2019-05-15T11:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsS3h1alZNVmpsYmlWdEtSa2liaGI1WkQ5YTR3MEcxWE9iQVp6aGtJZVl2eTF2Mnk3QW1zN1oyWlp4Z0xGS054NEg0OEZvdTQ3eXl1MUdENnhsSk9qem1mTE83d09LdktrL3dRYWZyWDE5VUY3MWF1VlZsR0hPWU4zeC9PRDVURzZuQ0tzVHlPaTZoOHY3bUt0eUtXNzkrVkNLajBsYkJkZlFKeEh0RkIvcDBwaGFKTFhmS1p4WFN1dVhRNTdSSWxzRHlrS1crTCtxWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c52da9-8d65-4399-931b-9e86dcd20ff8", "record_id": "flaws_cloudtrail:0000478:b1c52da9-8d65-4399-931b-9e86dcd20ff8", "row_index": 478, "timestamp": "2019-05-15T11:38:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c52da9-8d65-4399-931b-9e86dcd20ff8", "eventTime": "2019-05-15T11:38:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsS3h1alZNVmpsYmlWdEtSa2liaGI1WkQ5YTR3MEcxWE9iQVp6aGtJZVl2eTF2Mnk3QW1zN1oyWlp4Z0xGS054NEg0OEZvdTQ3eXl1MUdENnhsSk9qem1mTE83d09LdktrL3dRYWZyWDE5VUY3MWF1VlZsR0hPWU4zeC9PRDVURzZuQ0tzVHlPaTZoOHY3bUt0eUtXNzkrVkNLajBsYkJkZlFKeEh0RkIvcDBwaGFKTFhmS1p4WFN1dVhRNTdSSWxzRHlrS1crTCtxWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2862f4d1-a0f4-4bac-b387-598213b40e9d", "record_id": "flaws_cloudtrail:0000479:2862f4d1-a0f4-4bac-b387-598213b40e9d", "row_index": 479, "timestamp": "2019-05-15T11:38:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2862f4d1-a0f4-4bac-b387-598213b40e9d", "eventTime": "2019-05-15T11:38:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQbThYTHFtaHNaN0FwcHdsNDVzNkVZbkEzUXVZWGpsU005QkwwRUcyVlNCZWorNEE0OVIzUWR6Q2IrWkRjbzE0dTRCdnRaRlFPUS9IMGZlT0pHQmdHNnIrYmtaaHF0WjZQZHNPSjRYNTF5a2pTY0tNNVoxVDJjaHdlVm0vOVVaSUZQSWcxRTYxaFpnczBFVWM5OFhubGYrUWgxZUNYSHZoYWFQU3FaV24wSWlNb1p1NTdZdDM4SG5YVmc0dnZ4QjJ0bXJxNHNlSHpTTU40QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2862f4d1-a0f4-4bac-b387-598213b40e9d", "record_id": "flaws_cloudtrail:0000480:2862f4d1-a0f4-4bac-b387-598213b40e9d", "row_index": 480, "timestamp": "2019-05-15T11:38:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2862f4d1-a0f4-4bac-b387-598213b40e9d", "eventTime": "2019-05-15T11:38:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQbThYTHFtaHNaN0FwcHdsNDVzNkVZbkEzUXVZWGpsU005QkwwRUcyVlNCZWorNEE0OVIzUWR6Q2IrWkRjbzE0dTRCdnRaRlFPUS9IMGZlT0pHQmdHNnIrYmtaaHF0WjZQZHNPSjRYNTF5a2pTY0tNNVoxVDJjaHdlVm0vOVVaSUZQSWcxRTYxaFpnczBFVWM5OFhubGYrUWgxZUNYSHZoYWFQU3FaV24wSWlNb1p1NTdZdDM4SG5YVmc0dnZ4QjJ0bXJxNHNlSHpTTU40QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f598af37-3594-439b-bdeb-d948205fec37", "record_id": "flaws_cloudtrail:0000481:f598af37-3594-439b-bdeb-d948205fec37", "row_index": 481, "timestamp": "2019-05-15T11:38:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f598af37-3594-439b-bdeb-d948205fec37", "eventTime": "2019-05-15T11:38:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6dUtTK01JM041cmFjM1NrQ1VwL2ZEWVBySmRQT1NuNkpFMHRzVE5tbWN6aFFIcitQRVdkbkN5THJBalpaT0RWTVFJczNtNWtoNHREakwxVEZ5V255WVU4OFdPU3QyeVJzWjBSbGRkQTlTeERlRWdwTnRRK2crN0hKWFRRbU8vNmJuVDQ4TmptNC9WQWZPbjZ5a1M4ay9sVURTcklJM3lCdGgzZXJZbXdYK2xaTWhWMStzbG5sK2gyN0R4MVhIaXd3SXM2YkNtYkpmQzJwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f598af37-3594-439b-bdeb-d948205fec37", "record_id": "flaws_cloudtrail:0000482:f598af37-3594-439b-bdeb-d948205fec37", "row_index": 482, "timestamp": "2019-05-15T11:38:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f598af37-3594-439b-bdeb-d948205fec37", "eventTime": "2019-05-15T11:38:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6dUtTK01JM041cmFjM1NrQ1VwL2ZEWVBySmRQT1NuNkpFMHRzVE5tbWN6aFFIcitQRVdkbkN5THJBalpaT0RWTVFJczNtNWtoNHREakwxVEZ5V255WVU4OFdPU3QyeVJzWjBSbGRkQTlTeERlRWdwTnRRK2crN0hKWFRRbU8vNmJuVDQ4TmptNC9WQWZPbjZ5a1M4ay9sVURTcklJM3lCdGgzZXJZbXdYK2xaTWhWMStzbG5sK2gyN0R4MVhIaXd3SXM2YkNtYkpmQzJwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eece5c8e-59e3-4bb8-889e-b5e633c8c8ff", "record_id": "flaws_cloudtrail:0000483:eece5c8e-59e3-4bb8-889e-b5e633c8c8ff", "row_index": 483, "timestamp": "2019-05-15T11:38:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eece5c8e-59e3-4bb8-889e-b5e633c8c8ff", "eventTime": "2019-05-15T11:38:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrK2k0VURoeWNjUUpRVlRZWGQvelVtR2ZRblFVcnJwU0lrZHJyZW9FUWtkUEkvczlqSFF3UlNYVkVIZ1poOUU5ZW9xZ3h6R3lrOVhjdG1GSVA4bzVFRExGYmlCWFdqRU1zbmJCQTVHbG1oeHpvcG5HZ3RCOEJSYllBZHR1b1cyazRUbytHd0ZQRUhscktRTU1EVlIzK2FTWGlMMkNQdlhCckZ6T21zb0JRTHM5Z2VvTGwxdHpTbU92NWJNZDVUTTZpMlpUdVJkKyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eece5c8e-59e3-4bb8-889e-b5e633c8c8ff", "record_id": "flaws_cloudtrail:0000484:eece5c8e-59e3-4bb8-889e-b5e633c8c8ff", "row_index": 484, "timestamp": "2019-05-15T11:38:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eece5c8e-59e3-4bb8-889e-b5e633c8c8ff", "eventTime": "2019-05-15T11:38:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrK2k0VURoeWNjUUpRVlRZWGQvelVtR2ZRblFVcnJwU0lrZHJyZW9FUWtkUEkvczlqSFF3UlNYVkVIZ1poOUU5ZW9xZ3h6R3lrOVhjdG1GSVA4bzVFRExGYmlCWFdqRU1zbmJCQTVHbG1oeHpvcG5HZ3RCOEJSYllBZHR1b1cyazRUbytHd0ZQRUhscktRTU1EVlIzK2FTWGlMMkNQdlhCckZ6T21zb0JRTHM5Z2VvTGwxdHpTbU92NWJNZDVUTTZpMlpUdVJkKyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb9b999-bcfe-4ca8-bc5f-e855c82135fa", "record_id": "flaws_cloudtrail:0000485:fbb9b999-bcfe-4ca8-bc5f-e855c82135fa", "row_index": 485, "timestamp": "2019-05-15T11:38:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb9b999-bcfe-4ca8-bc5f-e855c82135fa", "eventTime": "2019-05-15T11:38:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0OVF0NEpZMEovbitjTERLdE40UWh4YUFOUnU3RnIwdldOSitmNEdmcWs0bnNleXVNRTNZVk1Fc1lhUW1NcDc3SGNXYk0wemlPTzZ6MkpOQitSWUFDOGxVZnI4akpoNXFsWFl4VUt3R1NjYjN4MDlYcUJ0MDNrby84cE5TeFNKUXUvd0s2bjJIb3BzWmFqNFk5UWR2WjdqM3lSa0x0VytpTW12Z042WGRzd1ZUT2VtNXJ4dWxVQTM5OXFWZFJnZjFDMmd5blJ0M2pNdmQyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb9b999-bcfe-4ca8-bc5f-e855c82135fa", "record_id": "flaws_cloudtrail:0000486:fbb9b999-bcfe-4ca8-bc5f-e855c82135fa", "row_index": 486, "timestamp": "2019-05-15T11:38:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb9b999-bcfe-4ca8-bc5f-e855c82135fa", "eventTime": "2019-05-15T11:38:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0OVF0NEpZMEovbitjTERLdE40UWh4YUFOUnU3RnIwdldOSitmNEdmcWs0bnNleXVNRTNZVk1Fc1lhUW1NcDc3SGNXYk0wemlPTzZ6MkpOQitSWUFDOGxVZnI4akpoNXFsWFl4VUt3R1NjYjN4MDlYcUJ0MDNrby84cE5TeFNKUXUvd0s2bjJIb3BzWmFqNFk5UWR2WjdqM3lSa0x0VytpTW12Z042WGRzd1ZUT2VtNXJ4dWxVQTM5OXFWZFJnZjFDMmd5blJ0M2pNdmQyUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490f03c7-f162-4ea8-b4fe-5595ae2081ce", "record_id": "flaws_cloudtrail:0000487:490f03c7-f162-4ea8-b4fe-5595ae2081ce", "row_index": 487, "timestamp": "2019-05-15T11:38:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490f03c7-f162-4ea8-b4fe-5595ae2081ce", "eventTime": "2019-05-15T11:38:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVZUdFZ3VFaHhkMjlLdVlpMmMvQVlFeTVFQjZPcjZMRVVIN1VIRVRtS2lBZnNqbFg4bU56VWZtNmxyQWd6SzBJZkhuZDliQlJHNFV5a094a2NtcHdFNDcydTVoVHRxRzRtMkJJSzhKTHVSVS94SngvaHFIT1l5d0hhVEorWDVOS2twZ1l5NGZ0QUh0UTYyaDk2eXErcjg4RTFZMXRQNXpEQi9xVzVyYTk0ejVjWlJPRUN2dk5Tc01xbFl0dmgwWHc1T0hhMkVLSzhjMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "490f03c7-f162-4ea8-b4fe-5595ae2081ce", "record_id": "flaws_cloudtrail:0000488:490f03c7-f162-4ea8-b4fe-5595ae2081ce", "row_index": 488, "timestamp": "2019-05-15T11:38:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "490f03c7-f162-4ea8-b4fe-5595ae2081ce", "eventTime": "2019-05-15T11:38:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVZUdFZ3VFaHhkMjlLdVlpMmMvQVlFeTVFQjZPcjZMRVVIN1VIRVRtS2lBZnNqbFg4bU56VWZtNmxyQWd6SzBJZkhuZDliQlJHNFV5a094a2NtcHdFNDcydTVoVHRxRzRtMkJJSzhKTHVSVS94SngvaHFIT1l5d0hhVEorWDVOS2twZ1l5NGZ0QUh0UTYyaDk2eXErcjg4RTFZMXRQNXpEQi9xVzVyYTk0ejVjWlJPRUN2dk5Tc01xbFl0dmgwWHc1T0hhMkVLSzhjMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d4a8ae-3662-4796-ba37-623ebe16d159", "record_id": "flaws_cloudtrail:0000489:50d4a8ae-3662-4796-ba37-623ebe16d159", "row_index": 489, "timestamp": "2019-05-15T11:38:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d4a8ae-3662-4796-ba37-623ebe16d159", "eventTime": "2019-05-15T11:38:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOaHl0ZmhtbzBQeEVSeEkrNUwxV2ZXUXZTVGlnc1Ruc084aVhWUGdOWTNEaEhwdkJ5REpqOUpXYXFMaHd5eG1LaFhXSnFMVE5MTU1vSGExNGNvbXRyM253TU53OWhBc3Y2RkcvVlAwazc0WG1RbnQ4ZzZKRFM5ZnhmWUFkVHNSUW1KS3ZsZnJkNFNuV096dFhYdTNTeEpoTmFCSW5UTHBsUFpQWk1xdUN5eUdnb3JxQ1hqNGg4S2duZXVFMEl0UlNTeTVmODRoTHoySG5EZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d4a8ae-3662-4796-ba37-623ebe16d159", "record_id": "flaws_cloudtrail:0000490:50d4a8ae-3662-4796-ba37-623ebe16d159", "row_index": 490, "timestamp": "2019-05-15T11:38:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d4a8ae-3662-4796-ba37-623ebe16d159", "eventTime": "2019-05-15T11:38:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOaHl0ZmhtbzBQeEVSeEkrNUwxV2ZXUXZTVGlnc1Ruc084aVhWUGdOWTNEaEhwdkJ5REpqOUpXYXFMaHd5eG1LaFhXSnFMVE5MTU1vSGExNGNvbXRyM253TU53OWhBc3Y2RkcvVlAwazc0WG1RbnQ4ZzZKRFM5ZnhmWUFkVHNSUW1KS3ZsZnJkNFNuV096dFhYdTNTeEpoTmFCSW5UTHBsUFpQWk1xdUN5eUdnb3JxQ1hqNGg4S2duZXVFMEl0UlNTeTVmODRoTHoySG5EZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b38ef4-fe17-49d0-b5be-c1a10306bd54", "record_id": "flaws_cloudtrail:0000491:44b38ef4-fe17-49d0-b5be-c1a10306bd54", "row_index": 491, "timestamp": "2019-05-15T11:38:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b38ef4-fe17-49d0-b5be-c1a10306bd54", "eventTime": "2019-05-15T11:38:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5Tm9jTXJ2aWVvRlRhcXdHazByUGVGNzR3RXI4cU5FUkRFRm0xbWdUbGFEdU1vNWsvTmw3WjhNNEdsTGtJeW9YVXE3QndiOWF6OUc2SG4xcGlocWNSekJMZXdsYmZGL0xUbWRQcWVqWjVvdE5yY21yd0hyV3ZURmVGcEtUWFJBWXN6bHYvSHMzdmZva3NhbEYyczdydG1pb0pBVUhSOWhEUDk0eXlDZUFFQWN6RkNRbzJGR2dzdXVTQUl6Rko5Q2VVNFZIaHMrcnBuSzVsQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b38ef4-fe17-49d0-b5be-c1a10306bd54", "record_id": "flaws_cloudtrail:0000492:44b38ef4-fe17-49d0-b5be-c1a10306bd54", "row_index": 492, "timestamp": "2019-05-15T11:38:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b38ef4-fe17-49d0-b5be-c1a10306bd54", "eventTime": "2019-05-15T11:38:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5Tm9jTXJ2aWVvRlRhcXdHazByUGVGNzR3RXI4cU5FUkRFRm0xbWdUbGFEdU1vNWsvTmw3WjhNNEdsTGtJeW9YVXE3QndiOWF6OUc2SG4xcGlocWNSekJMZXdsYmZGL0xUbWRQcWVqWjVvdE5yY21yd0hyV3ZURmVGcEtUWFJBWXN6bHYvSHMzdmZva3NhbEYyczdydG1pb0pBVUhSOWhEUDk0eXlDZUFFQWN6RkNRbzJGR2dzdXVTQUl6Rko5Q2VVNFZIaHMrcnBuSzVsQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34f2ce4-6c3f-4307-8eea-e19629beccfa", "record_id": "flaws_cloudtrail:0000493:e34f2ce4-6c3f-4307-8eea-e19629beccfa", "row_index": 493, "timestamp": "2019-05-15T11:38:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34f2ce4-6c3f-4307-8eea-e19629beccfa", "eventTime": "2019-05-15T11:38:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJSS9SdW1KZzY2NllWTnhOM1NCeWZOL1VxVkxJTXlRZmViNjdDTVRkWFJLODlaOHNvTUs0NnJjc3JiMUhwMFdOd01RNC9CbjlUY2RpWWRlSlVvZVlpbEl4NEIzZUpGTWxRWFdkM3cvdnd3ZmNJRFFJSXB6ZEJyMzZ1d1ljRzBBTjBuRkhoYzVRMTJ1VGJmOTFFVzVBOEJJMzVjQnhMN0dScXFJYko5MnR1YmRDZTIvWXdnMWR5THlJeEN4bnZzOWErTTJFVTJuSm9LU0pydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34f2ce4-6c3f-4307-8eea-e19629beccfa", "record_id": "flaws_cloudtrail:0000494:e34f2ce4-6c3f-4307-8eea-e19629beccfa", "row_index": 494, "timestamp": "2019-05-15T11:38:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34f2ce4-6c3f-4307-8eea-e19629beccfa", "eventTime": "2019-05-15T11:38:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJSS9SdW1KZzY2NllWTnhOM1NCeWZOL1VxVkxJTXlRZmViNjdDTVRkWFJLODlaOHNvTUs0NnJjc3JiMUhwMFdOd01RNC9CbjlUY2RpWWRlSlVvZVlpbEl4NEIzZUpGTWxRWFdkM3cvdnd3ZmNJRFFJSXB6ZEJyMzZ1d1ljRzBBTjBuRkhoYzVRMTJ1VGJmOTFFVzVBOEJJMzVjQnhMN0dScXFJYko5MnR1YmRDZTIvWXdnMWR5THlJeEN4bnZzOWErTTJFVTJuSm9LU0pydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3273d7e7-adf8-4611-b2c3-71ba8cd1e3c3", "record_id": "flaws_cloudtrail:0000495:3273d7e7-adf8-4611-b2c3-71ba8cd1e3c3", "row_index": 495, "timestamp": "2019-05-15T11:38:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3273d7e7-adf8-4611-b2c3-71ba8cd1e3c3", "eventTime": "2019-05-15T11:38:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvREdyQzRvb3JtdVQ4K0RYUnhMOGtJSXQ5MWZqT1Q5c2JyMndYYmlpMGhBa01ma2gvUW5XWnZzY2l1VXF3b2ZTdlBPK2Zzd0xGWVoxVUQ0MWhWWHVwSTNUdFp3QWFkNTF3dDNWUjRsOEtXSGJadi83cWFyU2c2SWEwcm1vakFpa2xuRW5Rb2RsUThwR0lHYVZmYk1PVVFXUytNKzVhV25MclNNVWxNVjM2amdFbWVKdmJ2VzdQWS9EN2taOWgxeWdFRk5WQ29uMmt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3273d7e7-adf8-4611-b2c3-71ba8cd1e3c3", "record_id": "flaws_cloudtrail:0000496:3273d7e7-adf8-4611-b2c3-71ba8cd1e3c3", "row_index": 496, "timestamp": "2019-05-15T11:38:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3273d7e7-adf8-4611-b2c3-71ba8cd1e3c3", "eventTime": "2019-05-15T11:38:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvREdyQzRvb3JtdVQ4K0RYUnhMOGtJSXQ5MWZqT1Q5c2JyMndYYmlpMGhBa01ma2gvUW5XWnZzY2l1VXF3b2ZTdlBPK2Zzd0xGWVoxVUQ0MWhWWHVwSTNUdFp3QWFkNTF3dDNWUjRsOEtXSGJadi83cWFyU2c2SWEwcm1vakFpa2xuRW5Rb2RsUThwR0lHYVZmYk1PVVFXUytNKzVhV25MclNNVWxNVjM2amdFbWVKdmJ2VzdQWS9EN2taOWgxeWdFRk5WQ29uMmt3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb3a56d-f5d3-4202-981b-579dc98b2e78", "record_id": "flaws_cloudtrail:0000497:efb3a56d-f5d3-4202-981b-579dc98b2e78", "row_index": 497, "timestamp": "2019-05-15T11:38:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb3a56d-f5d3-4202-981b-579dc98b2e78", "eventTime": "2019-05-15T11:38:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDRzNnN0lCUGNkdE56TEIwYkJ4Uks5dEwzdGFQb3ZheEpiNmIvQlZpc2ptMHZpUTNydGFVelYrdGRkS3BMS2VSVmk1eGtKWk5GUTRHbU9PbE1mRjlOWkMyTDcvejdISVVDY2M3VWdCZGFpYXlhM2F2Nzg5VU5DYklxUmxoR2pqU0VSN25pS0JRTGZGU1Zja0dwMFFPVWdnOXRoWkdZQmNQV1J0T0pqZUhkRmJ4NXc1djU1eElrVkZFNXFvM1pWRFBPeU9IV1Rxd2RDUkY4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb3a56d-f5d3-4202-981b-579dc98b2e78", "record_id": "flaws_cloudtrail:0000498:efb3a56d-f5d3-4202-981b-579dc98b2e78", "row_index": 498, "timestamp": "2019-05-15T11:38:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb3a56d-f5d3-4202-981b-579dc98b2e78", "eventTime": "2019-05-15T11:38:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDRzNnN0lCUGNkdE56TEIwYkJ4Uks5dEwzdGFQb3ZheEpiNmIvQlZpc2ptMHZpUTNydGFVelYrdGRkS3BMS2VSVmk1eGtKWk5GUTRHbU9PbE1mRjlOWkMyTDcvejdISVVDY2M3VWdCZGFpYXlhM2F2Nzg5VU5DYklxUmxoR2pqU0VSN25pS0JRTGZGU1Zja0dwMFFPVWdnOXRoWkdZQmNQV1J0T0pqZUhkRmJ4NXc1djU1eElrVkZFNXFvM1pWRFBPeU9IV1Rxd2RDUkY4UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af07073c-d39b-48d9-bbaa-2887204e3f84", "record_id": "flaws_cloudtrail:0000499:af07073c-d39b-48d9-bbaa-2887204e3f84", "row_index": 499, "timestamp": "2019-05-15T11:38:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af07073c-d39b-48d9-bbaa-2887204e3f84", "eventTime": "2019-05-15T11:38:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNXJycCs5dzNwZmJQWjgweVhoZStwZUVrRlpSL2JHY1oyQ1BoMWdvT0JWaVQybWI4UXdHNzJWaFhkVFlsamhPZUJYbmp5MkRzamxmVzMvcXU4a0ZmLzNLbnpZWmgyMkFBdnEwMmxpR3drZTV3czlpdSt0dHdMKzl5VEJHcEdjOE5jMkNYVnJvRitnVEJXMGk0bG9vMnZaTjhXaDZQWmgrczNETnZybVZtblZyQ3RsbFlabDR1anlFT1J1eWtrWURLcWM0U254MW9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "097e0ae4-d81c-4ed8-a73d-033aa0340028", "record_id": "flaws_cloudtrail:0000500:097e0ae4-d81c-4ed8-a73d-033aa0340028", "row_index": 500, "timestamp": "2019-05-15T11:38:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "097e0ae4-d81c-4ed8-a73d-033aa0340028", "eventTime": "2019-05-15T11:38:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzaXhNeU1XT3ZCWVVCdmN5cFRIanlvUVJUc1JMeHduOXJPbnF4Q2dRSERQZ0VOM3MrNXlsU3lVV3ZhOUQ2ZGdzdmc2NnZmL0VaWmoveDIzc2hwUS9aQ002aS9PV0J2aDNqbWM3ams2ODcyQ0oxR2RvRXVLeGZENVRuSlFlN1kySUtWT3lkT3ovL3B5ZXNkY3RDZkYvNzNYUDltb3p0MS9MYkZPaUxRd3A2OUxUSzdSeUVkdVV1SWRMeGRRN0lTWUpuZ25QeFcrREt2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af07073c-d39b-48d9-bbaa-2887204e3f84", "record_id": "flaws_cloudtrail:0000501:af07073c-d39b-48d9-bbaa-2887204e3f84", "row_index": 501, "timestamp": "2019-05-15T11:38:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af07073c-d39b-48d9-bbaa-2887204e3f84", "eventTime": "2019-05-15T11:38:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJNXJycCs5dzNwZmJQWjgweVhoZStwZUVrRlpSL2JHY1oyQ1BoMWdvT0JWaVQybWI4UXdHNzJWaFhkVFlsamhPZUJYbmp5MkRzamxmVzMvcXU4a0ZmLzNLbnpZWmgyMkFBdnEwMmxpR3drZTV3czlpdSt0dHdMKzl5VEJHcEdjOE5jMkNYVnJvRitnVEJXMGk0bG9vMnZaTjhXaDZQWmgrczNETnZybVZtblZyQ3RsbFlabDR1anlFT1J1eWtrWURLcWM0U254MW9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "097e0ae4-d81c-4ed8-a73d-033aa0340028", "record_id": "flaws_cloudtrail:0000502:097e0ae4-d81c-4ed8-a73d-033aa0340028", "row_index": 502, "timestamp": "2019-05-15T11:38:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "097e0ae4-d81c-4ed8-a73d-033aa0340028", "eventTime": "2019-05-15T11:38:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzaXhNeU1XT3ZCWVVCdmN5cFRIanlvUVJUc1JMeHduOXJPbnF4Q2dRSERQZ0VOM3MrNXlsU3lVV3ZhOUQ2ZGdzdmc2NnZmL0VaWmoveDIzc2hwUS9aQ002aS9PV0J2aDNqbWM3ams2ODcyQ0oxR2RvRXVLeGZENVRuSlFlN1kySUtWT3lkT3ovL3B5ZXNkY3RDZkYvNzNYUDltb3p0MS9MYkZPaUxRd3A2OUxUSzdSeUVkdVV1SWRMeGRRN0lTWUpuZ25QeFcrREt2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011aa3f2-71e7-42dc-813d-b87a0ea94492", "record_id": "flaws_cloudtrail:0000503:011aa3f2-71e7-42dc-813d-b87a0ea94492", "row_index": 503, "timestamp": "2019-05-15T11:38:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011aa3f2-71e7-42dc-813d-b87a0ea94492", "eventTime": "2019-05-15T11:38:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6SFAxVkEvb1NDVnlJL3FJQ0IzYjBRWVlONmdNRVBSTVREQ2s4MXJGY0NBa0hOWGpacTd5eXh4WE5IVTdjYjlKaWpGbmsralVIV2xYVlN3bUpFSk5kUWFJbVgwYmpIeUxaK2d3S2w0OHlhNmZ3RmNGWGJyV2d5RnJnY2tQSnc4dmZ4ZDRzamtOeGxZYWsrbU1kbDl5UUMvcnRnT25MQk9YS1dLTnVDWEJodWQ1eWV5eERZRGtkenpPMnZucXU1dlc5YUZBYkI1NXdYaVYrUE5RaTdrVXV3cXBubVVYWHQwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011aa3f2-71e7-42dc-813d-b87a0ea94492", "record_id": "flaws_cloudtrail:0000504:011aa3f2-71e7-42dc-813d-b87a0ea94492", "row_index": 504, "timestamp": "2019-05-15T11:38:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011aa3f2-71e7-42dc-813d-b87a0ea94492", "eventTime": "2019-05-15T11:38:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6SFAxVkEvb1NDVnlJL3FJQ0IzYjBRWVlONmdNRVBSTVREQ2s4MXJGY0NBa0hOWGpacTd5eXh4WE5IVTdjYjlKaWpGbmsralVIV2xYVlN3bUpFSk5kUWFJbVgwYmpIeUxaK2d3S2w0OHlhNmZ3RmNGWGJyV2d5RnJnY2tQSnc4dmZ4ZDRzamtOeGxZYWsrbU1kbDl5UUMvcnRnT25MQk9YS1dLTnVDWEJodWQ1eWV5eERZRGtkenpPMnZucXU1dlc5YUZBYkI1NXdYaVYrUE5RaTdrVXV3cXBubVVYWHQwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271a7f1a-9abd-4b59-b909-5865e25c990b", "record_id": "flaws_cloudtrail:0000505:271a7f1a-9abd-4b59-b909-5865e25c990b", "row_index": 505, "timestamp": "2019-05-15T11:38:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271a7f1a-9abd-4b59-b909-5865e25c990b", "eventTime": "2019-05-15T11:38:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqclphWWhDdjlweG5UVHpSditRZTlJT2pFbmVDUHQvams3SmJ5bGN1S3B6SWY3dExSUUNvYk5xSEVYNEhLZWp0dUlPUWRwZmJmclFQRm8rVUdvY1k5RElqUEJYRkliY2JUdXVvRmMrSWpaclBRaUtTWmU4OGtBOEV6UGwxSGVVT25XSUwyVFErbDZnNHFzNGpyY0Zsb1p6NzhuVW1UL1Z6RHF4cGJRelRuVVFyVWQ1Z1lBNERIS2tNbUthdGhaTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66d14f66-cbfd-4c44-9b6b-1df08f45b8af", "record_id": "flaws_cloudtrail:0000506:66d14f66-cbfd-4c44-9b6b-1df08f45b8af", "row_index": 506, "timestamp": "2019-05-15T11:38:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66d14f66-cbfd-4c44-9b6b-1df08f45b8af", "eventTime": "2019-05-15T11:38:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxSlNYRVdobXRTZGRvZENYcHltRDMvQ29tWlFBMmdVU0owcnc1Qk9SSWZUUWMvRUlBRDRRdSs5SkE4a2RraytCYUZ4TkhUMWtjdzdKYWNEMGFILzltL1FCejVNYXhJQktWZFVoYTJhRjgrVjArVitNMVNKYjJrbkJXWlYzazJZd0xzSkNUa3ZiNWhmeWVYODUwYlpMQ3FST3IzRERrUDFVSDRzdXhOaFFhb1pPU2VtTXdFdmNHYjBDTUNDeUsxNkVDMmNzY2dvSjBIdXkrOGZkNW1qUGxVVjNvMlE1NktrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271a7f1a-9abd-4b59-b909-5865e25c990b", "record_id": "flaws_cloudtrail:0000507:271a7f1a-9abd-4b59-b909-5865e25c990b", "row_index": 507, "timestamp": "2019-05-15T11:38:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271a7f1a-9abd-4b59-b909-5865e25c990b", "eventTime": "2019-05-15T11:38:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqclphWWhDdjlweG5UVHpSditRZTlJT2pFbmVDUHQvams3SmJ5bGN1S3B6SWY3dExSUUNvYk5xSEVYNEhLZWp0dUlPUWRwZmJmclFQRm8rVUdvY1k5RElqUEJYRkliY2JUdXVvRmMrSWpaclBRaUtTWmU4OGtBOEV6UGwxSGVVT25XSUwyVFErbDZnNHFzNGpyY0Zsb1p6NzhuVW1UL1Z6RHF4cGJRelRuVVFyVWQ1Z1lBNERIS2tNbUthdGhaTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66d14f66-cbfd-4c44-9b6b-1df08f45b8af", "record_id": "flaws_cloudtrail:0000508:66d14f66-cbfd-4c44-9b6b-1df08f45b8af", "row_index": 508, "timestamp": "2019-05-15T11:38:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66d14f66-cbfd-4c44-9b6b-1df08f45b8af", "eventTime": "2019-05-15T11:38:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxSlNYRVdobXRTZGRvZENYcHltRDMvQ29tWlFBMmdVU0owcnc1Qk9SSWZUUWMvRUlBRDRRdSs5SkE4a2RraytCYUZ4TkhUMWtjdzdKYWNEMGFILzltL1FCejVNYXhJQktWZFVoYTJhRjgrVjArVitNMVNKYjJrbkJXWlYzazJZd0xzSkNUa3ZiNWhmeWVYODUwYlpMQ3FST3IzRERrUDFVSDRzdXhOaFFhb1pPU2VtTXdFdmNHYjBDTUNDeUsxNkVDMmNzY2dvSjBIdXkrOGZkNW1qUGxVVjNvMlE1NktrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277663db-1cdd-4795-9c46-cb88e806f013", "record_id": "flaws_cloudtrail:0000509:277663db-1cdd-4795-9c46-cb88e806f013", "row_index": 509, "timestamp": "2019-05-15T11:38:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277663db-1cdd-4795-9c46-cb88e806f013", "eventTime": "2019-05-15T11:38:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJncTkyTmg5T0phZlQvNUNmRExNZHFIM0dUYW5jWEp5S0g5R3VDRVFSVlpXYjU5ZHZlMS91a29xWnViRFVIOUczM0V2S2c4clhEV1krSjUxV3V3c21wei96Lzc2T1Q4MlkwejVEeE96QlNrZGowTG1WRjNJYjRBcUZhY0drUVRndm5iMTJQZEpqbDVkRDNFM094ZE8yK1BwTVdzeGtLTWU4WFp2TGlhZktIeE1nL3FiaTlyZWtseVJkY2ZremxTODJnVlhXV1VMSDJoZlRpY1g2VDZUM1JUWk40SnEzZmJRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277663db-1cdd-4795-9c46-cb88e806f013", "record_id": "flaws_cloudtrail:0000510:277663db-1cdd-4795-9c46-cb88e806f013", "row_index": 510, "timestamp": "2019-05-15T11:38:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277663db-1cdd-4795-9c46-cb88e806f013", "eventTime": "2019-05-15T11:38:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJncTkyTmg5T0phZlQvNUNmRExNZHFIM0dUYW5jWEp5S0g5R3VDRVFSVlpXYjU5ZHZlMS91a29xWnViRFVIOUczM0V2S2c4clhEV1krSjUxV3V3c21wei96Lzc2T1Q4MlkwejVEeE96QlNrZGowTG1WRjNJYjRBcUZhY0drUVRndm5iMTJQZEpqbDVkRDNFM094ZE8yK1BwTVdzeGtLTWU4WFp2TGlhZktIeE1nL3FiaTlyZWtseVJkY2ZremxTODJnVlhXV1VMSDJoZlRpY1g2VDZUM1JUWk40SnEzZmJRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a498860-a3e4-4dd6-ac29-d5e8ca877bbc", "record_id": "flaws_cloudtrail:0000511:a498860-a3e4-4dd6-ac29-d5e8ca877bbc", "row_index": 511, "timestamp": "2019-05-15T11:38:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a498860-a3e4-4dd6-ac29-d5e8ca877bbc", "eventTime": "2019-05-15T11:38:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMN3lWWmI3WHQyWmRMSFNNQWRnMU16Z0Vrejl0Q1VYbEpLOERlVDNLU3dtcEF2TGxyWFVadnRuc3dzTGJLQVFqaFdKamhJQ2dGekt6ZGY4VkFsMU02ajdZY1ZPTlBYNTRrRDdxdFB0eDFVRFQ5SWFUMG55UEFYUXBXbGJGRFJGVlkrdU01cHYrVWoxVm9FdGsrRWRtYzk3ZCtPaEZmaEs5bEU4dWZYWFRjZTVZV0NXZ1Z3c3NwV1l4N3lqTno2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979c0e74-58cc-45ac-90ee-6e49a86c304a", "record_id": "flaws_cloudtrail:0000512:979c0e74-58cc-45ac-90ee-6e49a86c304a", "row_index": 512, "timestamp": "2019-05-15T11:38:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979c0e74-58cc-45ac-90ee-6e49a86c304a", "eventTime": "2019-05-15T11:38:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsczZCM25kS0lVa1ZrWURLNlhRbnhQbjJaN1VrVXJQSjJUMWJiMUFLWmhUT1UrMkhvWktxaGVOR1ZFeDgyTnhZQ0xITEU1K3RsUnVtYnlTbzN2UWdNY0FiZ3p1WWlkd0h2dkJJV1BrVmF6VkFnbnBqUUVpdktUK0U3Sm9Sd21kdSt1UHFBWnlqeWJsbElpYWgwMFFRMmg0dEMwdFF3TjIxTTFldis3bWR0a2QzNzV2MjlvL2x6aWp0NEsyVkZjK3JubXdJSmhVMzdRT2RKR0Q1VS9iWU9vZkZyZXl6dytNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a498860-a3e4-4dd6-ac29-d5e8ca877bbc", "record_id": "flaws_cloudtrail:0000513:a498860-a3e4-4dd6-ac29-d5e8ca877bbc", "row_index": 513, "timestamp": "2019-05-15T11:38:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a498860-a3e4-4dd6-ac29-d5e8ca877bbc", "eventTime": "2019-05-15T11:38:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMN3lWWmI3WHQyWmRMSFNNQWRnMU16Z0Vrejl0Q1VYbEpLOERlVDNLU3dtcEF2TGxyWFVadnRuc3dzTGJLQVFqaFdKamhJQ2dGekt6ZGY4VkFsMU02ajdZY1ZPTlBYNTRrRDdxdFB0eDFVRFQ5SWFUMG55UEFYUXBXbGJGRFJGVlkrdU01cHYrVWoxVm9FdGsrRWRtYzk3ZCtPaEZmaEs5bEU4dWZYWFRjZTVZV0NXZ1Z3c3NwV1l4N3lqTno2RT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979c0e74-58cc-45ac-90ee-6e49a86c304a", "record_id": "flaws_cloudtrail:0000514:979c0e74-58cc-45ac-90ee-6e49a86c304a", "row_index": 514, "timestamp": "2019-05-15T11:38:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979c0e74-58cc-45ac-90ee-6e49a86c304a", "eventTime": "2019-05-15T11:38:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsczZCM25kS0lVa1ZrWURLNlhRbnhQbjJaN1VrVXJQSjJUMWJiMUFLWmhUT1UrMkhvWktxaGVOR1ZFeDgyTnhZQ0xITEU1K3RsUnVtYnlTbzN2UWdNY0FiZ3p1WWlkd0h2dkJJV1BrVmF6VkFnbnBqUUVpdktUK0U3Sm9Sd21kdSt1UHFBWnlqeWJsbElpYWgwMFFRMmg0dEMwdFF3TjIxTTFldis3bWR0a2QzNzV2MjlvL2x6aWp0NEsyVkZjK3JubXdJSmhVMzdRT2RKR0Q1VS9iWU9vZkZyZXl6dytNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b729607a4-3632-4a15-8fc3-05f943752e74", "record_id": "flaws_cloudtrail:0000515:b729607a4-3632-4a15-8fc3-05f943752e74", "row_index": 515, "timestamp": "2019-05-15T11:38:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b729607a4-3632-4a15-8fc3-05f943752e74", "eventTime": "2019-05-15T11:38:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDWFpvK0lzemhSazZaZEpYT0pXZnF0b3RHV2dQMTFCemFYSm5jOUg1anBGMHpkSFdqTGJJUmFPR0wwWWk2MThHQmNSaHRGTDk1VXl5am5kVmJUZ1MzSHdoekt6MWdVUzA0eGk5elEyOHpaeGRlMEorckhZWW42Q3RoamQ1a3R6citHeE05VSsyUW00SHpRUzRXbi80OUFabVBUblJTQjVnUEVjQ1VEWGx6VHBJT2p2Ykw0djFwZXFSb2dRZjVXWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "410161d5-705d-45c5-9423-364a79abd04f", "record_id": "flaws_cloudtrail:0000516:410161d5-705d-45c5-9423-364a79abd04f", "row_index": 516, "timestamp": "2019-05-15T11:38:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "410161d5-705d-45c5-9423-364a79abd04f", "eventTime": "2019-05-15T11:38:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMYVFiMThsQTlIaVFEN3RsdjlST3ZvUXVMRi9ucUhsNE9hQnBpbkRkaS9vY2tuYWdnUzNFZG1RcVlORDRDc1FCYzhodXhENmkwTEFsUi9SekFKdmQ2SnRwZzZZaXo5MWNDVlpOYXpGTE1qS3VBaTBKWDJDZjdyNmF3b2lRY0c4S25JVmgvMkNhSGhXbyt3L1I0OWdkOHZUdUpnT05NWDljVS9mR0lRZG91cWVnbkUvblhnNndRZ28vUFEvR1BvbXo5Ni9XS0o0NFdScUcxdUtHV2ZWMVpNVWU3clkyNThnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b729607a4-3632-4a15-8fc3-05f943752e74", "record_id": "flaws_cloudtrail:0000517:b729607a4-3632-4a15-8fc3-05f943752e74", "row_index": 517, "timestamp": "2019-05-15T11:38:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b729607a4-3632-4a15-8fc3-05f943752e74", "eventTime": "2019-05-15T11:38:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDWFpvK0lzemhSazZaZEpYT0pXZnF0b3RHV2dQMTFCemFYSm5jOUg1anBGMHpkSFdqTGJJUmFPR0wwWWk2MThHQmNSaHRGTDk1VXl5am5kVmJUZ1MzSHdoekt6MWdVUzA0eGk5elEyOHpaeGRlMEorckhZWW42Q3RoamQ1a3R6citHeE05VSsyUW00SHpRUzRXbi80OUFabVBUblJTQjVnUEVjQ1VEWGx6VHBJT2p2Ykw0djFwZXFSb2dRZjVXWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "410161d5-705d-45c5-9423-364a79abd04f", "record_id": "flaws_cloudtrail:0000518:410161d5-705d-45c5-9423-364a79abd04f", "row_index": 518, "timestamp": "2019-05-15T11:38:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "410161d5-705d-45c5-9423-364a79abd04f", "eventTime": "2019-05-15T11:38:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMYVFiMThsQTlIaVFEN3RsdjlST3ZvUXVMRi9ucUhsNE9hQnBpbkRkaS9vY2tuYWdnUzNFZG1RcVlORDRDc1FCYzhodXhENmkwTEFsUi9SekFKdmQ2SnRwZzZZaXo5MWNDVlpOYXpGTE1qS3VBaTBKWDJDZjdyNmF3b2lRY0c4S25JVmgvMkNhSGhXbyt3L1I0OWdkOHZUdUpnT05NWDljVS9mR0lRZG91cWVnbkUvblhnNndRZ28vUFEvR1BvbXo5Ni9XS0o0NFdScUcxdUtHV2ZWMVpNVWU3clkyNThnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43477fea-67ec-4175-b5c1-5c1059ed0fab", "record_id": "flaws_cloudtrail:0000519:43477fea-67ec-4175-b5c1-5c1059ed0fab", "row_index": 519, "timestamp": "2019-05-15T11:38:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43477fea-67ec-4175-b5c1-5c1059ed0fab", "eventTime": "2019-05-15T11:38:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwZ2VVVDNNd3R5djVIQitJV2lISmJFR2I4anNlcGNadDZNSzVpZnYwazM4REh1VGc0U0dZR3E4R2JpUE94MVlJNkg2Wnl6WDZiK21WQ0NxVktpdFk5TGVmNEdZZENXU2tQWGRiOCtMQ2E5cERWK0hEVGdjSnMxdE9mcUpwaFlaRnhWWEVyK3ZIalN6S1lQN21LeDZZOUJQcHc0Ui9NR3NmU1ZCSkQ0ZXpVUGY4QjA2YjZraEpQdlJVTVFhbExvbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43477fea-67ec-4175-b5c1-5c1059ed0fab", "record_id": "flaws_cloudtrail:0000520:43477fea-67ec-4175-b5c1-5c1059ed0fab", "row_index": 520, "timestamp": "2019-05-15T11:38:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43477fea-67ec-4175-b5c1-5c1059ed0fab", "eventTime": "2019-05-15T11:38:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwZ2VVVDNNd3R5djVIQitJV2lISmJFR2I4anNlcGNadDZNSzVpZnYwazM4REh1VGc0U0dZR3E4R2JpUE94MVlJNkg2Wnl6WDZiK21WQ0NxVktpdFk5TGVmNEdZZENXU2tQWGRiOCtMQ2E5cERWK0hEVGdjSnMxdE9mcUpwaFlaRnhWWEVyK3ZIalN6S1lQN21LeDZZOUJQcHc0Ui9NR3NmU1ZCSkQ0ZXpVUGY4QjA2YjZraEpQdlJVTVFhbExvbz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa392d8b-2ae3-4909-b672-a23114ffb89a", "record_id": "flaws_cloudtrail:0000521:aa392d8b-2ae3-4909-b672-a23114ffb89a", "row_index": 521, "timestamp": "2019-05-15T11:42:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa392d8b-2ae3-4909-b672-a23114ffb89a", "eventTime": "2019-05-15T11:42:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa392d8b-2ae3-4909-b672-a23114ffb89a", "record_id": "flaws_cloudtrail:0000522:aa392d8b-2ae3-4909-b672-a23114ffb89a", "row_index": 522, "timestamp": "2019-05-15T11:42:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa392d8b-2ae3-4909-b672-a23114ffb89a", "eventTime": "2019-05-15T11:42:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43bf1142-c6e7-476c-8ac8-f856c67373", "record_id": "flaws_cloudtrail:0000523:43bf1142-c6e7-476c-8ac8-f856c67373", "row_index": 523, "timestamp": "2019-05-15T11:42:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43bf1142-c6e7-476c-8ac8-f856c67373", "eventTime": "2019-05-15T11:42:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlSC9WU0JhN3cwQmVqSEdwWHgwUU5CV1BZcUJwaDdPeFBhVk0vTHNzZEhjTDlVRXB6a1R3anNseEpwTmZ0SzArblpmRlNWdWJibkk5RWpBcFRQK2ZqbXd0SEtjUkVZeVNwNjd5U3E4NEVoUEU1S0ZJclFJRS9pL3lncGw3YVpHTzFJU0FpQ2swQzlNajJENkRkOGZzUHVnaC9kTlE3dWFhalNFY3RwZXEyT05DNitmY0E5MVc5cURBa2tEUzcwMDFlQ2tKWTk3eElnND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43bf1142-c6e7-476c-8ac8-f856c67373", "record_id": "flaws_cloudtrail:0000524:43bf1142-c6e7-476c-8ac8-f856c67373", "row_index": 524, "timestamp": "2019-05-15T11:42:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1068, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43bf1142-c6e7-476c-8ac8-f856c67373", "eventTime": "2019-05-15T11:42:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlSC9WU0JhN3cwQmVqSEdwWHgwUU5CV1BZcUJwaDdPeFBhVk0vTHNzZEhjTDlVRXB6a1R3anNseEpwTmZ0SzArblpmRlNWdWJibkk5RWpBcFRQK2ZqbXd0SEtjUkVZeVNwNjd5U3E4NEVoUEU1S0ZJclFJRS9pL3lncGw3YVpHTzFJU0FpQ2swQzlNajJENkRkOGZzUHVnaC9kTlE3dWFhalNFY3RwZXEyT05DNitmY0E5MVc5cURBa2tEUzcwMDFlQ2tKWTk3eElnND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f74f4b6-d531-4322-b3ee-e4da0d9c0d87", "record_id": "flaws_cloudtrail:0000525:1f74f4b6-d531-4322-b3ee-e4da0d9c0d87", "row_index": 525, "timestamp": "2019-05-15T11:42:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f74f4b6-d531-4322-b3ee-e4da0d9c0d87", "eventTime": "2019-05-15T11:42:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJudUJLK1lJWjJFelNGU2w2eXovcmtoa1kySXBpUmFDdXE4eEVPMDdGUEc2RitIdFE0dlpkdERTUTlHWW1rUmNkMDNGMTB2NWZNTXlyaVRtV2VXandyM3A5eExOTW52ZUxqZEQycWd2VG50MU9CUHkvYVJSQ29za0FOTlBqR0JZUHh2QXduOWdDV1U2YW1LSXdadTQ5OXpWQ1JOT3VKd2ZMaXBDU2piS2JmWElMZDJxNUFJa1I3VURHNXg5ZVJSYXB4bmhvbkdmeFJrS2VDUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f74f4b6-d531-4322-b3ee-e4da0d9c0d87", "record_id": "flaws_cloudtrail:0000526:1f74f4b6-d531-4322-b3ee-e4da0d9c0d87", "row_index": 526, "timestamp": "2019-05-15T11:42:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f74f4b6-d531-4322-b3ee-e4da0d9c0d87", "eventTime": "2019-05-15T11:42:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJudUJLK1lJWjJFelNGU2w2eXovcmtoa1kySXBpUmFDdXE4eEVPMDdGUEc2RitIdFE0dlpkdERTUTlHWW1rUmNkMDNGMTB2NWZNTXlyaVRtV2VXandyM3A5eExOTW52ZUxqZEQycWd2VG50MU9CUHkvYVJSQ29za0FOTlBqR0JZUHh2QXduOWdDV1U2YW1LSXdadTQ5OXpWQ1JOT3VKd2ZMaXBDU2piS2JmWElMZDJxNUFJa1I3VURHNXg5ZVJSYXB4bmhvbkdmeFJrS2VDUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "386ebcdc-51ba-4c51-839c-cbbc989f4f6c", "record_id": "flaws_cloudtrail:0000527:386ebcdc-51ba-4c51-839c-cbbc989f4f6c", "row_index": 527, "timestamp": "2019-05-15T11:42:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "386ebcdc-51ba-4c51-839c-cbbc989f4f6c", "eventTime": "2019-05-15T11:42:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "386ebcdc-51ba-4c51-839c-cbbc989f4f6c", "record_id": "flaws_cloudtrail:0000528:386ebcdc-51ba-4c51-839c-cbbc989f4f6c", "row_index": 528, "timestamp": "2019-05-15T11:42:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "386ebcdc-51ba-4c51-839c-cbbc989f4f6c", "eventTime": "2019-05-15T11:42:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df77ad47-fc1a-422c-bd27-63512deda", "record_id": "flaws_cloudtrail:0000529:df77ad47-fc1a-422c-bd27-63512deda", "row_index": 529, "timestamp": "2019-05-15T11:43:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df77ad47-fc1a-422c-bd27-63512deda", "eventTime": "2019-05-15T11:43:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df77ad47-fc1a-422c-bd27-63512deda", "record_id": "flaws_cloudtrail:0000530:df77ad47-fc1a-422c-bd27-63512deda", "row_index": 530, "timestamp": "2019-05-15T11:43:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df77ad47-fc1a-422c-bd27-63512deda", "eventTime": "2019-05-15T11:43:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb091d63-4a2f-4ce7-b79c-069baa044290", "record_id": "flaws_cloudtrail:0000531:bb091d63-4a2f-4ce7-b79c-069baa044290", "row_index": 531, "timestamp": "2019-05-15T11:43:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb091d63-4a2f-4ce7-b79c-069baa044290", "eventTime": "2019-05-15T11:43:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTaUgrbERUMmw1R2RscEhSQytMSjRnSjNwQnNQbGJTdFhQUmdNRVFwamg0bzNIRDBRc0R2RkwvOEYwaXNqNEEydm4xYWVLaC9ZZ2RjVmZ4UHo3Mks0V1h4NlpYOGdVT3JUM0tLNVNwM25XSlU4SGQzQ09HTFVXSTB6ZDJxRWpqamUvbWFod0RWREI4TjRjQ2R6WFZVREdOaGVNWVhxWUVWNmV3TzlRWDVxdWltUUVWWDg2N2Q1U1VGb050dUx2cFN5N2cvNmlaNU1vMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb091d63-4a2f-4ce7-b79c-069baa044290", "record_id": "flaws_cloudtrail:0000532:bb091d63-4a2f-4ce7-b79c-069baa044290", "row_index": 532, "timestamp": "2019-05-15T11:43:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb091d63-4a2f-4ce7-b79c-069baa044290", "eventTime": "2019-05-15T11:43:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTaUgrbERUMmw1R2RscEhSQytMSjRnSjNwQnNQbGJTdFhQUmdNRVFwamg0bzNIRDBRc0R2RkwvOEYwaXNqNEEydm4xYWVLaC9ZZ2RjVmZ4UHo3Mks0V1h4NlpYOGdVT3JUM0tLNVNwM25XSlU4SGQzQ09HTFVXSTB6ZDJxRWpqamUvbWFod0RWREI4TjRjQ2R6WFZVREdOaGVNWVhxWUVWNmV3TzlRWDVxdWltUUVWWDg2N2Q1U1VGb050dUx2cFN5N2cvNmlaNU1vMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190426-a4b1-4418-a626-ddbd8b40edf4", "record_id": "flaws_cloudtrail:0000533:190426-a4b1-4418-a626-ddbd8b40edf4", "row_index": 533, "timestamp": "2019-05-15T11:43:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190426-a4b1-4418-a626-ddbd8b40edf4", "eventTime": "2019-05-15T11:43:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPTGVCUXdVMVkrdW82MTJNb3RyRXMveFg0Z1lrNVVXdzd3Tk1FZEhhZXlxVE9ZOXZrelBsU1EraGM0eTFLNWoxbmlwdjZIMzhBRnRHMktBMlVmcVh0bGNzK3lKMDU2emFBdG9qWVNMMVJnT1dSWktIV1h0NWpKY3cvVmc3eUdKZTB3bWZLZjFhRnpvWFd3WlJyOHJTUno0NVVrcDRVSzBsVW16dzNtZzh3Qk01aGxwLy9VWjlZVDVwVTl6T0pZMzRtaGxoM2FORzJiMnQ2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190426-a4b1-4418-a626-ddbd8b40edf4", "record_id": "flaws_cloudtrail:0000534:190426-a4b1-4418-a626-ddbd8b40edf4", "row_index": 534, "timestamp": "2019-05-15T11:43:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190426-a4b1-4418-a626-ddbd8b40edf4", "eventTime": "2019-05-15T11:43:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPTGVCUXdVMVkrdW82MTJNb3RyRXMveFg0Z1lrNVVXdzd3Tk1FZEhhZXlxVE9ZOXZrelBsU1EraGM0eTFLNWoxbmlwdjZIMzhBRnRHMktBMlVmcVh0bGNzK3lKMDU2emFBdG9qWVNMMVJnT1dSWktIV1h0NWpKY3cvVmc3eUdKZTB3bWZLZjFhRnpvWFd3WlJyOHJTUno0NVVrcDRVSzBsVW16dzNtZzh3Qk01aGxwLy9VWjlZVDVwVTl6T0pZMzRtaGxoM2FORzJiMnQ2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982225-b27b-4f45-be52-76f39b08cc31", "record_id": "flaws_cloudtrail:0000535:982225-b27b-4f45-be52-76f39b08cc31", "row_index": 535, "timestamp": "2019-05-15T11:43:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982225-b27b-4f45-be52-76f39b08cc31", "eventTime": "2019-05-15T11:43:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1ajBzQUQrbEtyQVEvckYvRXljcnVsTUZjNVVwd0pvQUxDU2xHZGdCM3BIbHZsUWFFTGIzUXh0VTl3VEJEbXp3ZGE1b3hVSkJmQWVoY0U5ejVmbitCQU8xTmJVRTFmeUtTSkNCdUoyOUxuVXlZZ3dwV25YNnUydGlNeVRLb3ExOExncWE2a09Vd1lPcHdLdzJUMUpXWkgyWW5aVHJ0ZHV2eWI3Z2JCVVdodmo0NjRsbjZiYkg2aHFwWENUK3dLdDFoNUZDKzlEaisxNDFVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982225-b27b-4f45-be52-76f39b08cc31", "record_id": "flaws_cloudtrail:0000536:982225-b27b-4f45-be52-76f39b08cc31", "row_index": 536, "timestamp": "2019-05-15T11:43:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982225-b27b-4f45-be52-76f39b08cc31", "eventTime": "2019-05-15T11:43:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1ajBzQUQrbEtyQVEvckYvRXljcnVsTUZjNVVwd0pvQUxDU2xHZGdCM3BIbHZsUWFFTGIzUXh0VTl3VEJEbXp3ZGE1b3hVSkJmQWVoY0U5ejVmbitCQU8xTmJVRTFmeUtTSkNCdUoyOUxuVXlZZ3dwV25YNnUydGlNeVRLb3ExOExncWE2a09Vd1lPcHdLdzJUMUpXWkgyWW5aVHJ0ZHV2eWI3Z2JCVVdodmo0NjRsbjZiYkg2aHFwWENUK3dLdDFoNUZDKzlEaisxNDFVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bf6a118-d3a2-4779-89b1-6eea1cb580c5", "record_id": "flaws_cloudtrail:0000537:7bf6a118-d3a2-4779-89b1-6eea1cb580c5", "row_index": 537, "timestamp": "2019-05-15T11:43:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bf6a118-d3a2-4779-89b1-6eea1cb580c5", "eventTime": "2019-05-15T11:43:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhNGR6K2I2WHI3bmF1S3VITHJxb0lLMVY1MjJSTE13UEZ1VFYvOFUvL0JYWFRHaGU5RFZ4WEZ2UDFQemVSVlUwUloxQmhaMWl6M0kwSG1aK0ltcDVsWmorWS9TRStNOVppOXFoeUw5ZHFGUE5ObCtZNDlZN1pDUExqZmtVSDRIZkw0MHBSZFRNRCthdk1CSXRGNXFoUTNseGV0TjkvTytFeGoxaFJUWk1DYU1aT2xlMloxQzhVVnpFZ2J6R09jWFJlMmRrSEtCMiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bf6a118-d3a2-4779-89b1-6eea1cb580c5", "record_id": "flaws_cloudtrail:0000538:7bf6a118-d3a2-4779-89b1-6eea1cb580c5", "row_index": 538, "timestamp": "2019-05-15T11:43:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bf6a118-d3a2-4779-89b1-6eea1cb580c5", "eventTime": "2019-05-15T11:43:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhNGR6K2I2WHI3bmF1S3VITHJxb0lLMVY1MjJSTE13UEZ1VFYvOFUvL0JYWFRHaGU5RFZ4WEZ2UDFQemVSVlUwUloxQmhaMWl6M0kwSG1aK0ltcDVsWmorWS9TRStNOVppOXFoeUw5ZHFGUE5ObCtZNDlZN1pDUExqZmtVSDRIZkw0MHBSZFRNRCthdk1CSXRGNXFoUTNseGV0TjkvTytFeGoxaFJUWk1DYU1aT2xlMloxQzhVVnpFZ2J6R09jWFJlMmRrSEtCMiIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f00080-e0db-47b3-9b55-70a478b31f48", "record_id": "flaws_cloudtrail:0000539:96f00080-e0db-47b3-9b55-70a478b31f48", "row_index": 539, "timestamp": "2019-05-15T11:43:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f00080-e0db-47b3-9b55-70a478b31f48", "eventTime": "2019-05-15T11:43:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHckdQU2sxaWN1dHdrT2V3OElhYzhINFVYRGE1SnRuZ2F4aDNRMEd2cGtnWlFnc3FSVTJwTzhlWVUrWGw2SUJFWTlOTUlUNFk0MUh6UW9WQkZaZDF5WEp5eWlGc0g4NFJuUUNKVlVvQXFkdnN5VlhyTTZxUmQ3THRvMEhNTzlCTTJnWlBpQS9kS2tDY3pLZG92MjBOQ3ByR1UybktLdnpZSkdMdS9ISENNNmxadWRhTHBkSSt5bU5IRDBqWnNEQllKUzFpWklqYTVkZEJLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f00080-e0db-47b3-9b55-70a478b31f48", "record_id": "flaws_cloudtrail:0000540:96f00080-e0db-47b3-9b55-70a478b31f48", "row_index": 540, "timestamp": "2019-05-15T11:43:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f00080-e0db-47b3-9b55-70a478b31f48", "eventTime": "2019-05-15T11:43:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHckdQU2sxaWN1dHdrT2V3OElhYzhINFVYRGE1SnRuZ2F4aDNRMEd2cGtnWlFnc3FSVTJwTzhlWVUrWGw2SUJFWTlOTUlUNFk0MUh6UW9WQkZaZDF5WEp5eWlGc0g4NFJuUUNKVlVvQXFkdnN5VlhyTTZxUmQ3THRvMEhNTzlCTTJnWlBpQS9kS2tDY3pLZG92MjBOQ3ByR1UybktLdnpZSkdMdS9ISENNNmxadWRhTHBkSSt5bU5IRDBqWnNEQllKUzFpWklqYTVkZEJLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0bf03a9-973e-407b-a00f-d5d2f9bf882e", "record_id": "flaws_cloudtrail:0000541:e0bf03a9-973e-407b-a00f-d5d2f9bf882e", "row_index": 541, "timestamp": "2019-05-15T11:43:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0bf03a9-973e-407b-a00f-d5d2f9bf882e", "eventTime": "2019-05-15T11:43:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCSCtlWjZtM1FWbS90L0FhbU1icDNQUG1YUzVDZTBtWXd3cEdtK3ZvdlBhbWpndmxPQ2Z3K3FjUWdjWHNUTEZQWGhBQSs0NFdXNGhFN0JqcnlndWtDN2gydS9xbzlPQkMwcklmOEY0VGJyZUhUNSt2R21xYXJXZGttUHBNL3h6b2lBdzM3SUFtVzRsWFpiSnd1emJHSy82Z3FnMDNVbjdOVjhpdHJETFpSM2xNdzQzWXFycFYwckhLRGFzUWFMSXRLd2ovTHJUOGVNdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0bf03a9-973e-407b-a00f-d5d2f9bf882e", "record_id": "flaws_cloudtrail:0000542:e0bf03a9-973e-407b-a00f-d5d2f9bf882e", "row_index": 542, "timestamp": "2019-05-15T11:43:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0bf03a9-973e-407b-a00f-d5d2f9bf882e", "eventTime": "2019-05-15T11:43:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCSCtlWjZtM1FWbS90L0FhbU1icDNQUG1YUzVDZTBtWXd3cEdtK3ZvdlBhbWpndmxPQ2Z3K3FjUWdjWHNUTEZQWGhBQSs0NFdXNGhFN0JqcnlndWtDN2gydS9xbzlPQkMwcklmOEY0VGJyZUhUNSt2R21xYXJXZGttUHBNL3h6b2lBdzM3SUFtVzRsWFpiSnd1emJHSy82Z3FnMDNVbjdOVjhpdHJETFpSM2xNdzQzWXFycFYwckhLRGFzUWFMSXRLd2ovTHJUOGVNdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dc170bb-a0ec-429a-b113-1827b5acce60", "record_id": "flaws_cloudtrail:0000543:8dc170bb-a0ec-429a-b113-1827b5acce60", "row_index": 543, "timestamp": "2019-05-15T11:43:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dc170bb-a0ec-429a-b113-1827b5acce60", "eventTime": "2019-05-15T11:43:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlYy93djI5RFhoY3BiQ0RJU3FiSkRhZUp3V1NRUHd1MkZvQStBcytNd0NmakFaYXFwc2RBemMzL2RwT3ROOFBtaVZRUUtCSWt5K1JGOHRoZDVXQ1JPR3F0a3dXR0MyNnF1THI2WndtNFlxdTBqTEJ3L1pOQnRPV2VqNFVsajU2MXVPUERYUW5UR0dpRW5MTFBCU2VrdUo2d3pzQzQwVHBYV1RJc1NRa3ZVOVk0ZnNvRnJObTYvZmNDWEVjUXRKMDZZb2tWSUlRWmdwMjg2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dc170bb-a0ec-429a-b113-1827b5acce60", "record_id": "flaws_cloudtrail:0000544:8dc170bb-a0ec-429a-b113-1827b5acce60", "row_index": 544, "timestamp": "2019-05-15T11:43:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dc170bb-a0ec-429a-b113-1827b5acce60", "eventTime": "2019-05-15T11:43:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlYy93djI5RFhoY3BiQ0RJU3FiSkRhZUp3V1NRUHd1MkZvQStBcytNd0NmakFaYXFwc2RBemMzL2RwT3ROOFBtaVZRUUtCSWt5K1JGOHRoZDVXQ1JPR3F0a3dXR0MyNnF1THI2WndtNFlxdTBqTEJ3L1pOQnRPV2VqNFVsajU2MXVPUERYUW5UR0dpRW5MTFBCU2VrdUo2d3pzQzQwVHBYV1RJc1NRa3ZVOVk0ZnNvRnJObTYvZmNDWEVjUXRKMDZZb2tWSUlRWmdwMjg2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e60d1d20-1ce4-4aa1-85c0-d506a1df2d22", "record_id": "flaws_cloudtrail:0000545:e60d1d20-1ce4-4aa1-85c0-d506a1df2d22", "row_index": 545, "timestamp": "2019-05-15T11:43:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e60d1d20-1ce4-4aa1-85c0-d506a1df2d22", "eventTime": "2019-05-15T11:43:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaOVdNOVZrWHVCNnlJNnNma2NSU2RLbzVCRUQrQVM3cHBVSks0WEMxc1VQK0grdy9Mcld5cXBOK25QTk1ydXp2bVBxcGtJUTdjOG5Vcm95MmUxaDkweitqbG9hM1I0Mk9iTWtsVEdHQkZXTXZhT0lSRnh1K2pKRStSanUxZWZpM3gySXVOUHR5eTA5dVY1NkNGU2liLzZHTi8wajhSdkttK0JSS0JXUHc2RXMwQkx3TmJhc09Ra2dXdTdzQTRsZWE3SjlCNVdqV2tTaUV5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e60d1d20-1ce4-4aa1-85c0-d506a1df2d22", "record_id": "flaws_cloudtrail:0000546:e60d1d20-1ce4-4aa1-85c0-d506a1df2d22", "row_index": 546, "timestamp": "2019-05-15T11:43:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e60d1d20-1ce4-4aa1-85c0-d506a1df2d22", "eventTime": "2019-05-15T11:43:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaOVdNOVZrWHVCNnlJNnNma2NSU2RLbzVCRUQrQVM3cHBVSks0WEMxc1VQK0grdy9Mcld5cXBOK25QTk1ydXp2bVBxcGtJUTdjOG5Vcm95MmUxaDkweitqbG9hM1I0Mk9iTWtsVEdHQkZXTXZhT0lSRnh1K2pKRStSanUxZWZpM3gySXVOUHR5eTA5dVY1NkNGU2liLzZHTi8wajhSdkttK0JSS0JXUHc2RXMwQkx3TmJhc09Ra2dXdTdzQTRsZWE3SjlCNVdqV2tTaUV5Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac73097-eceb-4220-9116-e9f427376be23", "record_id": "flaws_cloudtrail:0000547:ac73097-eceb-4220-9116-e9f427376be23", "row_index": 547, "timestamp": "2019-05-15T11:43:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac73097-eceb-4220-9116-e9f427376be23", "eventTime": "2019-05-15T11:43:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQOHZzK0ZtUWN2MCtSbVJ6ZWg2VkJRenJGTnd4MitJdVVWRllzTHNRVkkyMnpXTHJGRzZSZWZyUGhJazAxK0hNRGRsS01MREV5NzVEaU0vU3Q0MjAxNDBRMUZaQ2ZyODE3aUw0TzM5ODdNTENHZW53SU84UDRBYmYwTVM1dVcrbm1YaVZMRUtaTE9Fenl6L0dWWDBJNHRCdzY0a0JKS2NBb1RVU0lJMEp4NVdMMkZGakxFU3BXL0IvM1V3T3ZtcDRPNjNHVGcvSHlIdGMxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac73097-eceb-4220-9116-e9f427376be23", "record_id": "flaws_cloudtrail:0000548:ac73097-eceb-4220-9116-e9f427376be23", "row_index": 548, "timestamp": "2019-05-15T11:43:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac73097-eceb-4220-9116-e9f427376be23", "eventTime": "2019-05-15T11:43:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQOHZzK0ZtUWN2MCtSbVJ6ZWg2VkJRenJGTnd4MitJdVVWRllzTHNRVkkyMnpXTHJGRzZSZWZyUGhJazAxK0hNRGRsS01MREV5NzVEaU0vU3Q0MjAxNDBRMUZaQ2ZyODE3aUw0TzM5ODdNTENHZW53SU84UDRBYmYwTVM1dVcrbm1YaVZMRUtaTE9Fenl6L0dWWDBJNHRCdzY0a0JKS2NBb1RVU0lJMEp4NVdMMkZGakxFU3BXL0IvM1V3T3ZtcDRPNjNHVGcvSHlIdGMxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39d7a28a-304e-419f-8864-bd50dd2bccab", "record_id": "flaws_cloudtrail:0000549:39d7a28a-304e-419f-8864-bd50dd2bccab", "row_index": 549, "timestamp": "2019-05-15T11:43:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39d7a28a-304e-419f-8864-bd50dd2bccab", "eventTime": "2019-05-15T11:43:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1YVJHb1pEblpIN2trMWVWSUtpUkxIUVZFVUljQVJrd0JDQTY2OVpMWGM4bjdvN0pkempoMlNoYmFEQ0dkcHl0djNMUjBUWmVlYm9mQ1BwdFBCdS9IZ0dnUllKeE1XczF6SWNPKyszZnVWYzRYR1N3QkRHZ0Z1K205SGV3M3ptRlRVNUJoNjVlZXVpeTRTcldNWE5FRDlFZ1czdVo5b00rUFNUV1I2SUlWSGpORkFXdVlBZk94TjgzN2MrekU0YXpaK2JRNGFXNnZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39d7a28a-304e-419f-8864-bd50dd2bccab", "record_id": "flaws_cloudtrail:0000550:39d7a28a-304e-419f-8864-bd50dd2bccab", "row_index": 550, "timestamp": "2019-05-15T11:43:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39d7a28a-304e-419f-8864-bd50dd2bccab", "eventTime": "2019-05-15T11:43:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1YVJHb1pEblpIN2trMWVWSUtpUkxIUVZFVUljQVJrd0JDQTY2OVpMWGM4bjdvN0pkempoMlNoYmFEQ0dkcHl0djNMUjBUWmVlYm9mQ1BwdFBCdS9IZ0dnUllKeE1XczF6SWNPKyszZnVWYzRYR1N3QkRHZ0Z1K205SGV3M3ptRlRVNUJoNjVlZXVpeTRTcldNWE5FRDlFZ1czdVo5b00rUFNUV1I2SUlWSGpORkFXdVlBZk94TjgzN2MrekU0YXpaK2JRNGFXNnZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006aac8f-5322-43d8-9255-623e8048fc3c", "record_id": "flaws_cloudtrail:0000551:006aac8f-5322-43d8-9255-623e8048fc3c", "row_index": 551, "timestamp": "2019-05-15T11:43:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006aac8f-5322-43d8-9255-623e8048fc3c", "eventTime": "2019-05-15T11:43:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5V2hoNitNUzR6WVZ1UW5yZzFvamVnUGg5R2hoNVdqdWdaYUQ3Sy9yb1c0b1FOUkJEUWpBZWZPajFiRHZSUDIzRHBmWEp1eTVVdTYxVnRZNzRhTVFxclEzODdKV0NhVGFkSjRJeDZGL2JaeExYQ2xIU0FPRUdiaERQNXJPcGpjeFlmRnlmREE0cXpNSGlKS1o1VXRtMTY5SmwzU1ViTWZmUzAzSzZsOUFiNGdoOWVsalNOSkFDTVNmbkVhLzdybVE5U1E5Yy9CYXdUNXNaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006aac8f-5322-43d8-9255-623e8048fc3c", "record_id": "flaws_cloudtrail:0000552:006aac8f-5322-43d8-9255-623e8048fc3c", "row_index": 552, "timestamp": "2019-05-15T11:43:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006aac8f-5322-43d8-9255-623e8048fc3c", "eventTime": "2019-05-15T11:43:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5V2hoNitNUzR6WVZ1UW5yZzFvamVnUGg5R2hoNVdqdWdaYUQ3Sy9yb1c0b1FOUkJEUWpBZWZPajFiRHZSUDIzRHBmWEp1eTVVdTYxVnRZNzRhTVFxclEzODdKV0NhVGFkSjRJeDZGL2JaeExYQ2xIU0FPRUdiaERQNXJPcGpjeFlmRnlmREE0cXpNSGlKS1o1VXRtMTY5SmwzU1ViTWZmUzAzSzZsOUFiNGdoOWVsalNOSkFDTVNmbkVhLzdybVE5U1E5Yy9CYXdUNXNaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c619fbd0-67d5-43ae-9c98-c898ab0f9047", "record_id": "flaws_cloudtrail:0000553:c619fbd0-67d5-43ae-9c98-c898ab0f9047", "row_index": 553, "timestamp": "2019-05-15T11:43:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c619fbd0-67d5-43ae-9c98-c898ab0f9047", "eventTime": "2019-05-15T11:43:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtN3RsQmx3azVtM1ZrSy9RT1JBODRITmZBQmNGYk0wS2dpam1MNnpXb3M2MzNBbGRtRFVXZzd6ZkJHTzJmQnU0QXgzNGdldE54amF2bDU1OGF2L2VSY3ltUTVTZnEwV0lMWit5K2VNTVlJc2F5emJuMmQwa2xWcitIaVlCOE81cFZRMFoyRXJ3TVVVZWZWSjJTV3U5K1lrNG5OZ1IrdnZXNzJHUEV5WDVBd2RmTTFUdzlZWWROcnF5a0NoNzNrRGJjaFM2QW16VC93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c619fbd0-67d5-43ae-9c98-c898ab0f9047", "record_id": "flaws_cloudtrail:0000554:c619fbd0-67d5-43ae-9c98-c898ab0f9047", "row_index": 554, "timestamp": "2019-05-15T11:43:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c619fbd0-67d5-43ae-9c98-c898ab0f9047", "eventTime": "2019-05-15T11:43:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtN3RsQmx3azVtM1ZrSy9RT1JBODRITmZBQmNGYk0wS2dpam1MNnpXb3M2MzNBbGRtRFVXZzd6ZkJHTzJmQnU0QXgzNGdldE54amF2bDU1OGF2L2VSY3ltUTVTZnEwV0lMWit5K2VNTVlJc2F5emJuMmQwa2xWcitIaVlCOE81cFZRMFoyRXJ3TVVVZWZWSjJTV3U5K1lrNG5OZ1IrdnZXNzJHUEV5WDVBd2RmTTFUdzlZWWROcnF5a0NoNzNrRGJjaFM2QW16VC93PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb5f5ed-2a02-446a-b5ff-db1a49ab4695", "record_id": "flaws_cloudtrail:0000555:5fb5f5ed-2a02-446a-b5ff-db1a49ab4695", "row_index": 555, "timestamp": "2019-05-15T11:43:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb5f5ed-2a02-446a-b5ff-db1a49ab4695", "eventTime": "2019-05-15T11:43:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIWEo5TUowMEFTdDVvWWR5by94bnEvRzhWaUROOVNUTVlNbjU5RTllRmJaMXk4MDZ6WWhqM0VZSWVGbzFlZmNmaE9mdERsQzNSbEx5dzFOTzFPOTlER2UxRy9PTWdzMnRoSEx6UDlJeXlHOTNvYThjQlYxMDZHSHkxVXNSdHpsbmlhejVRNmtjellSOG9ybm05Z2RkNUJ2cUl3cXlyVWxmZTNSSWxUTDdIYXYvMGtOakZ6STk4UllBdkdqRUlkM0R1RFYvSFJTQy9zVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb5f5ed-2a02-446a-b5ff-db1a49ab4695", "record_id": "flaws_cloudtrail:0000556:5fb5f5ed-2a02-446a-b5ff-db1a49ab4695", "row_index": 556, "timestamp": "2019-05-15T11:43:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1067, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb5f5ed-2a02-446a-b5ff-db1a49ab4695", "eventTime": "2019-05-15T11:43:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIWEo5TUowMEFTdDVvWWR5by94bnEvRzhWaUROOVNUTVlNbjU5RTllRmJaMXk4MDZ6WWhqM0VZSWVGbzFlZmNmaE9mdERsQzNSbEx5dzFOTzFPOTlER2UxRy9PTWdzMnRoSEx6UDlJeXlHOTNvYThjQlYxMDZHSHkxVXNSdHpsbmlhejVRNmtjellSOG9ybm05Z2RkNUJ2cUl3cXlyVWxmZTNSSWxUTDdIYXYvMGtOakZ6STk4UllBdkdqRUlkM0R1RFYvSFJTQy9zVT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d79b3545-ba9b-4bcb-a5ea-bcf7d97b3909", "record_id": "flaws_cloudtrail:0000557:d79b3545-ba9b-4bcb-a5ea-bcf7d97b3909", "row_index": 557, "timestamp": "2019-05-15T11:43:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d79b3545-ba9b-4bcb-a5ea-bcf7d97b3909", "eventTime": "2019-05-15T11:43:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzL2JsOVdKalA3MElhcHRsNUsvV3BhanBZVnZZcS93QXNXc0EvQ3QzellYRkZ2Q1pkQVRvOUk4N3JkaXpubVR1ZzJvRHlDY2t0NlhySHlWTnIyQ2N0UkNzWHBPYkYrMlVSRjdwODhkczhUaDJBRk1uV0tNK1RrbGJNVUlXRWZpcVIzV2NxdzYrb1RKM1VpTjU5RWRwMEk0NHVGZE9tWVVjdmdPZVU1NFVEbnFYMm04Y01WUlh5MDI1TS9BRWg1K2xvcktvb2djYndOWWtQNkRtK0tjeVBZZDd6aktTQ3gwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef6acc3-224f-47e0-b71c-ec69aeb99320", "record_id": "flaws_cloudtrail:0000558:2ef6acc3-224f-47e0-b71c-ec69aeb99320", "row_index": 558, "timestamp": "2019-05-15T11:43:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef6acc3-224f-47e0-b71c-ec69aeb99320", "eventTime": "2019-05-15T11:43:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyeDhEcEdUeXJ1R0hHYVc2bndLV245NEkrRGNQRVNod2tmdmZ3ZEZqNlBUbkI4ODVCK25yLzVoOXpRSFYzbHpoL0dvMXNqSFNCSlQyNG5QWk5uWStKQnptaG9aTmNqMjFlMjM0clJYbThmOE4zVitidUVVYm1Ba3ZCeXJlZmR0NzdjamJ4dnBRSjVYU2JLMHg1VVNTS3B5RFN3OGZaWG80cmNrVjZkSE5SZERURWlPZ1RJUUw1WTF4K2o1TzNoQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d79b3545-ba9b-4bcb-a5ea-bcf7d97b3909", "record_id": "flaws_cloudtrail:0000559:d79b3545-ba9b-4bcb-a5ea-bcf7d97b3909", "row_index": 559, "timestamp": "2019-05-15T11:43:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d79b3545-ba9b-4bcb-a5ea-bcf7d97b3909", "eventTime": "2019-05-15T11:43:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzL2JsOVdKalA3MElhcHRsNUsvV3BhanBZVnZZcS93QXNXc0EvQ3QzellYRkZ2Q1pkQVRvOUk4N3JkaXpubVR1ZzJvRHlDY2t0NlhySHlWTnIyQ2N0UkNzWHBPYkYrMlVSRjdwODhkczhUaDJBRk1uV0tNK1RrbGJNVUlXRWZpcVIzV2NxdzYrb1RKM1VpTjU5RWRwMEk0NHVGZE9tWVVjdmdPZVU1NFVEbnFYMm04Y01WUlh5MDI1TS9BRWg1K2xvcktvb2djYndOWWtQNkRtK0tjeVBZZDd6aktTQ3gwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef6acc3-224f-47e0-b71c-ec69aeb99320", "record_id": "flaws_cloudtrail:0000560:2ef6acc3-224f-47e0-b71c-ec69aeb99320", "row_index": 560, "timestamp": "2019-05-15T11:43:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef6acc3-224f-47e0-b71c-ec69aeb99320", "eventTime": "2019-05-15T11:43:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyeDhEcEdUeXJ1R0hHYVc2bndLV245NEkrRGNQRVNod2tmdmZ3ZEZqNlBUbkI4ODVCK25yLzVoOXpRSFYzbHpoL0dvMXNqSFNCSlQyNG5QWk5uWStKQnptaG9aTmNqMjFlMjM0clJYbThmOE4zVitidUVVYm1Ba3ZCeXJlZmR0NzdjamJ4dnBRSjVYU2JLMHg1VVNTS3B5RFN3OGZaWG80cmNrVjZkSE5SZERURWlPZ1RJUUw1WTF4K2o1TzNoQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632035-be19-4db6-8275-038a9211b69a", "record_id": "flaws_cloudtrail:0000561:632035-be19-4db6-8275-038a9211b69a", "row_index": 561, "timestamp": "2019-05-15T11:43:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632035-be19-4db6-8275-038a9211b69a", "eventTime": "2019-05-15T11:43:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhYVc3N05Sdk5xUi9FRE1rQjVqc3ZBVmpMdG9UTW5sWDQzUXp3bXhQdVd5bjh3SHcvYm1MYUF4MU41Q2VmWmc3d3FIMUI2SXFZYUtsUUdhQytaajhRckp6bHdjVTFQUmV6VXhjaUJKNEoydzRxM1kyOTFUZVcvSDFEcFY0WktPZFFDOTliRkdBQnduemUyWTlaQ3pZN1lPb2tsdzdTeEE1ZU1YTW1UdVE4VEVsZ3EwS2R6L1ZRZlFaUFB2cXRKZENRVGtRc1dSbzl3WDczZGVoL2k2bWJmdHV2Qk95aDBvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632035-be19-4db6-8275-038a9211b69a", "record_id": "flaws_cloudtrail:0000562:632035-be19-4db6-8275-038a9211b69a", "row_index": 562, "timestamp": "2019-05-15T11:43:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632035-be19-4db6-8275-038a9211b69a", "eventTime": "2019-05-15T11:43:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhYVc3N05Sdk5xUi9FRE1rQjVqc3ZBVmpMdG9UTW5sWDQzUXp3bXhQdVd5bjh3SHcvYm1MYUF4MU41Q2VmWmc3d3FIMUI2SXFZYUtsUUdhQytaajhRckp6bHdjVTFQUmV6VXhjaUJKNEoydzRxM1kyOTFUZVcvSDFEcFY0WktPZFFDOTliRkdBQnduemUyWTlaQ3pZN1lPb2tsdzdTeEE1ZU1YTW1UdVE4VEVsZ3EwS2R6L1ZRZlFaUFB2cXRKZENRVGtRc1dSbzl3WDczZGVoL2k2bWJmdHV2Qk95aDBvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cec6a9d6-5a5a-46de-8611-972a62a695d2", "record_id": "flaws_cloudtrail:0000563:cec6a9d6-5a5a-46de-8611-972a62a695d2", "row_index": 563, "timestamp": "2019-05-15T11:43:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cec6a9d6-5a5a-46de-8611-972a62a695d2", "eventTime": "2019-05-15T11:43:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyMjM3QVNZK09TOGFtdExvMXJiRyt0Q2hOYkRhbWI4QnBxYnRKMTVPVEJCWktkc3MySFdhTWxhbFkzMU96UTgzOGNabXc2anBNeEJGK2ZOTkR3MUhIc0RPaFRhUjZBcmZpbk5xaHF5MC9oUGxubjhGZndqS2FOSTZpbm5OOXlnQ2xRU3VqS2w1Yy84aGU0ZURZUWoycmFiMWtCUGFlRjl6VEo5c2FPNm1ZcHliUzdkRTk4czRsbUNaQjJxWlF1VUlRbVdwc0RmZVhIQXZXb3NwL0wzektLSmVEc2dCblhBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cec6a9d6-5a5a-46de-8611-972a62a695d2", "record_id": "flaws_cloudtrail:0000564:cec6a9d6-5a5a-46de-8611-972a62a695d2", "row_index": 564, "timestamp": "2019-05-15T11:43:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cec6a9d6-5a5a-46de-8611-972a62a695d2", "eventTime": "2019-05-15T11:43:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyMjM3QVNZK09TOGFtdExvMXJiRyt0Q2hOYkRhbWI4QnBxYnRKMTVPVEJCWktkc3MySFdhTWxhbFkzMU96UTgzOGNabXc2anBNeEJGK2ZOTkR3MUhIc0RPaFRhUjZBcmZpbk5xaHF5MC9oUGxubjhGZndqS2FOSTZpbm5OOXlnQ2xRU3VqS2w1Yy84aGU0ZURZUWoycmFiMWtCUGFlRjl6VEo5c2FPNm1ZcHliUzdkRTk4czRsbUNaQjJxWlF1VUlRbVdwc0RmZVhIQXZXb3NwL0wzektLSmVEc2dCblhBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb60c79f-ed78-46e8-827a-9120512bce78", "record_id": "flaws_cloudtrail:0000565:fb60c79f-ed78-46e8-827a-9120512bce78", "row_index": 565, "timestamp": "2019-05-15T11:43:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb60c79f-ed78-46e8-827a-9120512bce78", "eventTime": "2019-05-15T11:43:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFclN1RW5qWXJCQWJHdmE1M3M5SENsZkdMRStHVHFDbjhrYUpyVHcyU0J0MDdOMEZhRUkxSXIzdkdmQXM3MUNkWGk3NFRKUk8rNEV0cmxvZkxxZVdGdXlQakRvZVZyZy9NVnlFZjE3WW1YR1JjSDZ3Um1CeW1oNWV5OWk4Rk9oeVlvaHlqSlI4RmEwTUFxaTk2RkthdmpFL2Zxb0Fyc3NMaWt4dFUrK2Y1UTUyayt4cG5DT2JPaitnV1dhLys0bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb60c79f-ed78-46e8-827a-9120512bce78", "record_id": "flaws_cloudtrail:0000566:fb60c79f-ed78-46e8-827a-9120512bce78", "row_index": 566, "timestamp": "2019-05-15T11:43:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb60c79f-ed78-46e8-827a-9120512bce78", "eventTime": "2019-05-15T11:43:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFclN1RW5qWXJCQWJHdmE1M3M5SENsZkdMRStHVHFDbjhrYUpyVHcyU0J0MDdOMEZhRUkxSXIzdkdmQXM3MUNkWGk3NFRKUk8rNEV0cmxvZkxxZVdGdXlQakRvZVZyZy9NVnlFZjE3WW1YR1JjSDZ3Um1CeW1oNWV5OWk4Rk9oeVlvaHlqSlI4RmEwTUFxaTk2RkthdmpFL2Zxb0Fyc3NMaWt4dFUrK2Y1UTUyayt4cG5DT2JPaitnV1dhLys0bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff794fb-9abf-4adc-ac84-7eec0235e484", "record_id": "flaws_cloudtrail:0000567:bff794fb-9abf-4adc-ac84-7eec0235e484", "row_index": 567, "timestamp": "2019-05-15T11:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff794fb-9abf-4adc-ac84-7eec0235e484", "eventTime": "2019-05-15T11:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5azZzbk5zT1JHaWZSTHpKak96RjBPN3NwMFRzMitxTXdjTzFzRm9hQlREWmR4WStyR1RaYmtOYTVlbUxablhMTUFSTnVza2dkQjRNL3NjTFVqTllWSTA5dWxzNlFXbkN4dGdDS25VR293bXcwNTlyREFYbjdiYXIvRStyOEhhN1JMdUM4Tjd4YmVTNWxoVWZZSnJUeVJQQ3JZWWp4MWprK2htVW1GOWJMOUJwcGFwV3BwdFVrZlVuRmticE05UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd4ae8d8-f0d1-49a2-9475-ef5d1bc927e6", "record_id": "flaws_cloudtrail:0000568:bd4ae8d8-f0d1-49a2-9475-ef5d1bc927e6", "row_index": 568, "timestamp": "2019-05-15T11:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd4ae8d8-f0d1-49a2-9475-ef5d1bc927e6", "eventTime": "2019-05-15T11:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2ZVBNVGtnM2pQVHZTbnhFZ25GUCs0UWxxY2x1QnVDRUxmbXM3TDhVaVZrckhJSy9EVlFDQlorZ1gwTUhYZHV1WnRKNEJpdkNQbmlDOGM0VVo3ME9iWnQvUmpTM2FDS3VLZmxKbHRrNTk2a3RoWmdJYzYvVUU2YmY4Q281NXhVSlA1blNSWGw0Ti92a2N2RllNL25ydTFxVWZSN242UG4zZmV3VlIzc0NPRkdOTHVxZTIra2F3dUdvdXpZV1NVSWdJUW15VDBHTXJoL2FsSkhWdEZQTW4xemUrZk9oQXNFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff794fb-9abf-4adc-ac84-7eec0235e484", "record_id": "flaws_cloudtrail:0000569:bff794fb-9abf-4adc-ac84-7eec0235e484", "row_index": 569, "timestamp": "2019-05-15T11:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff794fb-9abf-4adc-ac84-7eec0235e484", "eventTime": "2019-05-15T11:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5azZzbk5zT1JHaWZSTHpKak96RjBPN3NwMFRzMitxTXdjTzFzRm9hQlREWmR4WStyR1RaYmtOYTVlbUxablhMTUFSTnVza2dkQjRNL3NjTFVqTllWSTA5dWxzNlFXbkN4dGdDS25VR293bXcwNTlyREFYbjdiYXIvRStyOEhhN1JMdUM4Tjd4YmVTNWxoVWZZSnJUeVJQQ3JZWWp4MWprK2htVW1GOWJMOUJwcGFwV3BwdFVrZlVuRmticE05UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd4ae8d8-f0d1-49a2-9475-ef5d1bc927e6", "record_id": "flaws_cloudtrail:0000570:bd4ae8d8-f0d1-49a2-9475-ef5d1bc927e6", "row_index": 570, "timestamp": "2019-05-15T11:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd4ae8d8-f0d1-49a2-9475-ef5d1bc927e6", "eventTime": "2019-05-15T11:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2ZVBNVGtnM2pQVHZTbnhFZ25GUCs0UWxxY2x1QnVDRUxmbXM3TDhVaVZrckhJSy9EVlFDQlorZ1gwTUhYZHV1WnRKNEJpdkNQbmlDOGM0VVo3ME9iWnQvUmpTM2FDS3VLZmxKbHRrNTk2a3RoWmdJYzYvVUU2YmY4Q281NXhVSlA1blNSWGw0Ti92a2N2RllNL25ydTFxVWZSN242UG4zZmV3VlIzc0NPRkdOTHVxZTIra2F3dUdvdXpZV1NVSWdJUW15VDBHTXJoL2FsSkhWdEZQTW4xemUrZk9oQXNFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06cb003a-0923-4834-a35b-40b1492f5a2c", "record_id": "flaws_cloudtrail:0000571:06cb003a-0923-4834-a35b-40b1492f5a2c", "row_index": 571, "timestamp": "2019-05-15T11:43:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06cb003a-0923-4834-a35b-40b1492f5a2c", "eventTime": "2019-05-15T11:43:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsVHFQQjBzd3hLRlpKLzZSb0pMaXlSeGdTS0xEU1NYeTd5WWNyTDBaN1B5NzhqWDV2eE5PMGNuUzZvL2NJeTJKMWtpbktSSzhEZENBQUFIVXVUUTRNbVRscDVqVmhRdEx2b3lRTEhsQXBCWTd2dFk1UEN2eDNvQ2k2cmtqK0dRall5T3Q2UU5CeVVHV0tyem5DN3AveW1mc1F0K1RieU1YR0lBcE43bWNxOWFBenZqTEVYNDRoOTJxZDk3OGRFdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b9ab6d-a075-4779-bb6e-01b74c16fb47", "record_id": "flaws_cloudtrail:0000572:68b9ab6d-a075-4779-bb6e-01b74c16fb47", "row_index": 572, "timestamp": "2019-05-15T11:43:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b9ab6d-a075-4779-bb6e-01b74c16fb47", "eventTime": "2019-05-15T11:43:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOMnkyVW9QaVVtRlZ4WWt1Y1Q4TTZ4YXc0eVBjaW5OdWwwR2xpZUVLczY5UlhFYUpTMllCUUhWYmtoVjEwUVJuY0RkNnRySFEyZ29IaGJJbWdLdlVSYlE3QW9NUzZITXQ5d1BXRDNyQks2U0NLeGRRMmo0d01Qa25NQ1hvUXdQVkQyU2lzMHZsakJzaFFqNlVhcHh6S0NmaEM2RHpLUEhudzk3NElCSzIvdk00bnZXNlRKTjZ0OGpMVis5VzBFMkFTL1QxaHpHNDd1ODlSNThNcWROb1FzS1BqSnBXTVcwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06cb003a-0923-4834-a35b-40b1492f5a2c", "record_id": "flaws_cloudtrail:0000573:06cb003a-0923-4834-a35b-40b1492f5a2c", "row_index": 573, "timestamp": "2019-05-15T11:43:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06cb003a-0923-4834-a35b-40b1492f5a2c", "eventTime": "2019-05-15T11:43:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsVHFQQjBzd3hLRlpKLzZSb0pMaXlSeGdTS0xEU1NYeTd5WWNyTDBaN1B5NzhqWDV2eE5PMGNuUzZvL2NJeTJKMWtpbktSSzhEZENBQUFIVXVUUTRNbVRscDVqVmhRdEx2b3lRTEhsQXBCWTd2dFk1UEN2eDNvQ2k2cmtqK0dRall5T3Q2UU5CeVVHV0tyem5DN3AveW1mc1F0K1RieU1YR0lBcE43bWNxOWFBenZqTEVYNDRoOTJxZDk3OGRFdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b9ab6d-a075-4779-bb6e-01b74c16fb47", "record_id": "flaws_cloudtrail:0000574:68b9ab6d-a075-4779-bb6e-01b74c16fb47", "row_index": 574, "timestamp": "2019-05-15T11:43:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b9ab6d-a075-4779-bb6e-01b74c16fb47", "eventTime": "2019-05-15T11:43:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOMnkyVW9QaVVtRlZ4WWt1Y1Q4TTZ4YXc0eVBjaW5OdWwwR2xpZUVLczY5UlhFYUpTMllCUUhWYmtoVjEwUVJuY0RkNnRySFEyZ29IaGJJbWdLdlVSYlE3QW9NUzZITXQ5d1BXRDNyQks2U0NLeGRRMmo0d01Qa25NQ1hvUXdQVkQyU2lzMHZsakJzaFFqNlVhcHh6S0NmaEM2RHpLUEhudzk3NElCSzIvdk00bnZXNlRKTjZ0OGpMVis5VzBFMkFTL1QxaHpHNDd1ODlSNThNcWROb1FzS1BqSnBXTVcwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5553f715-5a93-41d4-8da9-92e383fe808a", "record_id": "flaws_cloudtrail:0000575:5553f715-5a93-41d4-8da9-92e383fe808a", "row_index": 575, "timestamp": "2019-05-15T11:44:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5553f715-5a93-41d4-8da9-92e383fe808a", "eventTime": "2019-05-15T11:44:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5553f715-5a93-41d4-8da9-92e383fe808a", "record_id": "flaws_cloudtrail:0000576:5553f715-5a93-41d4-8da9-92e383fe808a", "row_index": 576, "timestamp": "2019-05-15T11:44:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5553f715-5a93-41d4-8da9-92e383fe808a", "eventTime": "2019-05-15T11:44:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "[aws-cli/1.16.157 Python/3.7.3 Darwin/18.6.0 botocore/1.12.147]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39629b90-8be5-4a59-af92-8e6866c1a8c2", "record_id": "flaws_cloudtrail:0000577:39629b90-8be5-4a59-af92-8e6866c1a8c2", "row_index": 577, "timestamp": "2019-05-15T11:47:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39629b90-8be5-4a59-af92-8e6866c1a8c2", "eventTime": "2019-05-15T11:47:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39629b90-8be5-4a59-af92-8e6866c1a8c2", "record_id": "flaws_cloudtrail:0000578:39629b90-8be5-4a59-af92-8e6866c1a8c2", "row_index": 578, "timestamp": "2019-05-15T11:47:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39629b90-8be5-4a59-af92-8e6866c1a8c2", "eventTime": "2019-05-15T11:47:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3cf09e7-bf29-43c0-8e83-17b39372e99", "record_id": "flaws_cloudtrail:0000579:c3cf09e7-bf29-43c0-8e83-17b39372e99", "row_index": 579, "timestamp": "2019-05-15T11:47:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3cf09e7-bf29-43c0-8e83-17b39372e99", "eventTime": "2019-05-15T11:47:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdExQMWNZNks1QjljN3RBS01BTFdkYi8rMkIyVkNHaTRYdmJjdTFOckU5OEdJeFB6c1ZXcUNjeWNjNTF4azF2aHZXZWdkQjFUeTNEZk5samZSclRablZQcHI4WXh6NG0yTUQ1RFR5eWdCeWgrOUtGdU1Zakg1VGQ2RUF1alZWUUkwbmZ1YnNyWXlXSC8yWWFQY2V0NDBlZWd6RGlnYjhOU05vZGliMTRSbUltNGQ4Wm9MZzg2Q3pkUGZmMlpCdVljT3VRUHJjeTJaND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3cf09e7-bf29-43c0-8e83-17b39372e99", "record_id": "flaws_cloudtrail:0000580:c3cf09e7-bf29-43c0-8e83-17b39372e99", "row_index": 580, "timestamp": "2019-05-15T11:47:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3cf09e7-bf29-43c0-8e83-17b39372e99", "eventTime": "2019-05-15T11:47:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDdExQMWNZNks1QjljN3RBS01BTFdkYi8rMkIyVkNHaTRYdmJjdTFOckU5OEdJeFB6c1ZXcUNjeWNjNTF4azF2aHZXZWdkQjFUeTNEZk5samZSclRablZQcHI4WXh6NG0yTUQ1RFR5eWdCeWgrOUtGdU1Zakg1VGQ2RUF1alZWUUkwbmZ1YnNyWXlXSC8yWWFQY2V0NDBlZWd6RGlnYjhOU05vZGliMTRSbUltNGQ4Wm9MZzg2Q3pkUGZmMlpCdVljT3VRUHJjeTJaND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b1d005-5d50-43f4-ad63-d9542fad642d", "record_id": "flaws_cloudtrail:0000581:b5b1d005-5d50-43f4-ad63-d9542fad642d", "row_index": 581, "timestamp": "2019-05-15T11:47:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b1d005-5d50-43f4-ad63-d9542fad642d", "eventTime": "2019-05-15T11:47:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1QVlEM1YxaUVDUDVLSmJBLzlERHN5Y0pLaVBJa1NBL0JuL3NCd3lqWk5wRG1sZktuckh5ZEd2ZjUwM3A0VXVSNEZoSGhYQnk2SlVSMk1iZkFYR2V5K2hob1EyZyt0Q0o4c3ZNa3VTczZzdTc3d095V3grSWRKQ25yUUNuZDFCbFZPMER6Mm5VLzZ3WWczZVJ1amlnOUJFVHVaUll3Tm9NU3dQWjBQcVhvUVNPWVF3azFWY1dxNHNsRGt1SjZGNHlsLyt2VkF1QTFXcHQvUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b1d005-5d50-43f4-ad63-d9542fad642d", "record_id": "flaws_cloudtrail:0000582:b5b1d005-5d50-43f4-ad63-d9542fad642d", "row_index": 582, "timestamp": "2019-05-15T11:47:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b1d005-5d50-43f4-ad63-d9542fad642d", "eventTime": "2019-05-15T11:47:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1QVlEM1YxaUVDUDVLSmJBLzlERHN5Y0pLaVBJa1NBL0JuL3NCd3lqWk5wRG1sZktuckh5ZEd2ZjUwM3A0VXVSNEZoSGhYQnk2SlVSMk1iZkFYR2V5K2hob1EyZyt0Q0o4c3ZNa3VTczZzdTc3d095V3grSWRKQ25yUUNuZDFCbFZPMER6Mm5VLzZ3WWczZVJ1amlnOUJFVHVaUll3Tm9NU3dQWjBQcVhvUVNPWVF3azFWY1dxNHNsRGt1SjZGNHlsLyt2VkF1QTFXcHQvUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "169ea8d6-cda3-4654-992e-6aead7c7c2c5", "record_id": "flaws_cloudtrail:0000583:169ea8d6-cda3-4654-992e-6aead7c7c2c5", "row_index": 583, "timestamp": "2019-05-15T11:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "169ea8d6-cda3-4654-992e-6aead7c7c2c5", "eventTime": "2019-05-15T11:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3bmkwa0p5L2FOcVB2Rkhhck9KRWQzb3hWbC9KQUU5YjljWVB4Q25DQjM1enprNlptZFJFSjhBak9zNnZTQ1BtZGZndUw2ZUpqWGZFU0FmVDdoQVI3NDRBbHRNMGtGTlg0Qy9VRkdSSTdVR0F0OVc3d1dCWGdOTURXOXFmcjc5SmxOODBrVU80SDJaWENVV0RSayttTVYxRmZXVS9COVNMcFBGaUk3cFRIaWN5di9sWWlMREJHbTBtT2V5M01aNmlIbGJ5eHpjWnVoSVY2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "169ea8d6-cda3-4654-992e-6aead7c7c2c5", "record_id": "flaws_cloudtrail:0000584:169ea8d6-cda3-4654-992e-6aead7c7c2c5", "row_index": 584, "timestamp": "2019-05-15T11:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "169ea8d6-cda3-4654-992e-6aead7c7c2c5", "eventTime": "2019-05-15T11:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3bmkwa0p5L2FOcVB2Rkhhck9KRWQzb3hWbC9KQUU5YjljWVB4Q25DQjM1enprNlptZFJFSjhBak9zNnZTQ1BtZGZndUw2ZUpqWGZFU0FmVDdoQVI3NDRBbHRNMGtGTlg0Qy9VRkdSSTdVR0F0OVc3d1dCWGdOTURXOXFmcjc5SmxOODBrVU80SDJaWENVV0RSayttTVYxRmZXVS9COVNMcFBGaUk3cFRIaWN5di9sWWlMREJHbTBtT2V5M01aNmlIbGJ5eHpjWnVoSVY2Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95bbd80-2be6-4229-a0b7-83fb37b04dfc", "record_id": "flaws_cloudtrail:0000585:c95bbd80-2be6-4229-a0b7-83fb37b04dfc", "row_index": 585, "timestamp": "2019-05-15T11:47:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95bbd80-2be6-4229-a0b7-83fb37b04dfc", "eventTime": "2019-05-15T11:47:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaa3V6UjE5eFRhRW9STFZDKzVuZE1Bd3hEYTErSTdrVmNZWDZ5S1RoQjFrYVpKTDJSQkFrbmxSYmxjTkRnTkJnMTBiQlRiZ2ZVNzNSd2VwclU5d3VZV2V0WjB5aUhIaTVGT1RIOHZuamNrZkcvY2dyK2RrWjBobzZ1OWs2djc4aHZXK0FpaWZKenlZZkVKOCtjU0pCS0NPWVhpRnVtWmRXWisyVVNDNDNlU0ZBVk1YcUt3OFkraTVQcE0zcVBPa2RmeDB4bWROKyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95bbd80-2be6-4229-a0b7-83fb37b04dfc", "record_id": "flaws_cloudtrail:0000586:c95bbd80-2be6-4229-a0b7-83fb37b04dfc", "row_index": 586, "timestamp": "2019-05-15T11:47:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95bbd80-2be6-4229-a0b7-83fb37b04dfc", "eventTime": "2019-05-15T11:47:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaa3V6UjE5eFRhRW9STFZDKzVuZE1Bd3hEYTErSTdrVmNZWDZ5S1RoQjFrYVpKTDJSQkFrbmxSYmxjTkRnTkJnMTBiQlRiZ2ZVNzNSd2VwclU5d3VZV2V0WjB5aUhIaTVGT1RIOHZuamNrZkcvY2dyK2RrWjBobzZ1OWs2djc4aHZXK0FpaWZKenlZZkVKOCtjU0pCS0NPWVhpRnVtWmRXWisyVVNDNDNlU0ZBVk1YcUt3OFkraTVQcE0zcVBPa2RmeDB4bWROKyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a908837-52b0-4d73-9f5c-bc25e99a7de2", "record_id": "flaws_cloudtrail:0000587:7a908837-52b0-4d73-9f5c-bc25e99a7de2", "row_index": 587, "timestamp": "2019-05-15T11:47:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a908837-52b0-4d73-9f5c-bc25e99a7de2", "eventTime": "2019-05-15T11:47:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5VUozdzFRQWkraUdHS1p4TGx0SnJNcXp3NXRVaTRSWFg3V1BUbFkxSEFVQnhJdi93Z2hyeWE2TVdSUE1jRFpURFJqdWk1TnEvaUxsNDdPU0ZBUGdhUnRSUzRKQ1JjQWZYT3VzU2kvSFBHanlXQWlzQWNqd3ZsbUlITTZERGhiQU5SL3RMUExjb0d1UjlyNmVkUFI4RHlhUUNucWxSK0VFTjlVSWV0Q1BLSEErVVM2MW1NQURmbGl0U1RHb1FKY2hLWDVzV3M4ZHRyQjlYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a908837-52b0-4d73-9f5c-bc25e99a7de2", "record_id": "flaws_cloudtrail:0000588:7a908837-52b0-4d73-9f5c-bc25e99a7de2", "row_index": 588, "timestamp": "2019-05-15T11:47:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a908837-52b0-4d73-9f5c-bc25e99a7de2", "eventTime": "2019-05-15T11:47:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5VUozdzFRQWkraUdHS1p4TGx0SnJNcXp3NXRVaTRSWFg3V1BUbFkxSEFVQnhJdi93Z2hyeWE2TVdSUE1jRFpURFJqdWk1TnEvaUxsNDdPU0ZBUGdhUnRSUzRKQ1JjQWZYT3VzU2kvSFBHanlXQWlzQWNqd3ZsbUlITTZERGhiQU5SL3RMUExjb0d1UjlyNmVkUFI4RHlhUUNucWxSK0VFTjlVSWV0Q1BLSEErVVM2MW1NQURmbGl0U1RHb1FKY2hLWDVzV3M4ZHRyQjlYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b1dcbc3-5cd0-4836-b57a-9cd35b4bef36", "record_id": "flaws_cloudtrail:0000589:5b1dcbc3-5cd0-4836-b57a-9cd35b4bef36", "row_index": 589, "timestamp": "2019-05-15T11:47:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b1dcbc3-5cd0-4836-b57a-9cd35b4bef36", "eventTime": "2019-05-15T11:47:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSN2VUYXBiWEd3UEVHWWJuTjhNM0dQQkZ5ZGc4M21STjFJb3lPeUFCSE1jRUNTRUFUVkNDZnZxT1FyR1JlMXQwUDJ5ZVAya0VEMFg4ZlAzR0NBVmFTeFZWTXRsaXV1cTNhY2UzbEZORTJYMFlxZjFxZWUwZ2RyL2ZFdTUyTWUvbVJpdGJ1MlF1K01FN29wVGlYS2ZHTkxGazl3eUs1dngzUUVDTWdseWoyTG5XdW5KS1kybTZ5N2o5UWhWQUtUMFhpaU5iOG1ja3gyWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b1dcbc3-5cd0-4836-b57a-9cd35b4bef36", "record_id": "flaws_cloudtrail:0000590:5b1dcbc3-5cd0-4836-b57a-9cd35b4bef36", "row_index": 590, "timestamp": "2019-05-15T11:47:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b1dcbc3-5cd0-4836-b57a-9cd35b4bef36", "eventTime": "2019-05-15T11:47:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSN2VUYXBiWEd3UEVHWWJuTjhNM0dQQkZ5ZGc4M21STjFJb3lPeUFCSE1jRUNTRUFUVkNDZnZxT1FyR1JlMXQwUDJ5ZVAya0VEMFg4ZlAzR0NBVmFTeFZWTXRsaXV1cTNhY2UzbEZORTJYMFlxZjFxZWUwZ2RyL2ZFdTUyTWUvbVJpdGJ1MlF1K01FN29wVGlYS2ZHTkxGazl3eUs1dngzUUVDTWdseWoyTG5XdW5KS1kybTZ5N2o5UWhWQUtUMFhpaU5iOG1ja3gyWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "989730b0-4d27-4449-bbad-2a30cb3940aa", "record_id": "flaws_cloudtrail:0000591:989730b0-4d27-4449-bbad-2a30cb3940aa", "row_index": 591, "timestamp": "2019-05-15T11:47:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "989730b0-4d27-4449-bbad-2a30cb3940aa", "eventTime": "2019-05-15T11:47:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFVStCVm4xNlZrZVQ4aW9lb2w4VDh6eTlyZlFFdWplNG5GSitvZHRHeUNhTnJtUFZYRXV2bXdqUEx2VnZwbWJDUjdRbERqVy9lUWg1a2NuWnh0MzBYUE1USzczVkdpTnVGcTNHdzFZbG5PUm1iZkVzSldrdFRtODAxbGoySTNVK0MyNzZQK1gxQnZacjJLNWJwYlhVbU1KVEJQQklBSGZ4d3dUWWlzKzlqeXdFOTdLSzNtd2RNUUhSNklxVG5HN3hMZGpCV0x3T0FpREppZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "989730b0-4d27-4449-bbad-2a30cb3940aa", "record_id": "flaws_cloudtrail:0000592:989730b0-4d27-4449-bbad-2a30cb3940aa", "row_index": 592, "timestamp": "2019-05-15T11:47:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "989730b0-4d27-4449-bbad-2a30cb3940aa", "eventTime": "2019-05-15T11:47:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFVStCVm4xNlZrZVQ4aW9lb2w4VDh6eTlyZlFFdWplNG5GSitvZHRHeUNhTnJtUFZYRXV2bXdqUEx2VnZwbWJDUjdRbERqVy9lUWg1a2NuWnh0MzBYUE1USzczVkdpTnVGcTNHdzFZbG5PUm1iZkVzSldrdFRtODAxbGoySTNVK0MyNzZQK1gxQnZacjJLNWJwYlhVbU1KVEJQQklBSGZ4d3dUWWlzKzlqeXdFOTdLSzNtd2RNUUhSNklxVG5HN3hMZGpCV0x3T0FpREppZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fceafe0-6252-46a1-bc64-0c00c932fa04", "record_id": "flaws_cloudtrail:0000593:3fceafe0-6252-46a1-bc64-0c00c932fa04", "row_index": 593, "timestamp": "2019-05-15T11:47:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fceafe0-6252-46a1-bc64-0c00c932fa04", "eventTime": "2019-05-15T11:47:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMK3pYTVdXNFE5RHAwaWc2eTQvMzl6RXh6U041T1NxUlBmVWx6cGg3cEpDdzNLNkJBYnJaU3ptaGFNVlZiaHp5eUVncnkzQ2hSamJUa2V0WnZ2OTJqZktyLzZvSisrVTdGa1BHcjlLRSs2bmZoQU9SOWVIZFVNbTNvUVZPajIrcjV2QzFGbnNKYlBaYUoyWEs0d1JUcEtEWnZqeHpTZUp4T3lObDFEdjNxenp5MUxhTmxTRytaY2FvN1g3V0xhOGFDRXlSeThSMC9wWTVVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fceafe0-6252-46a1-bc64-0c00c932fa04", "record_id": "flaws_cloudtrail:0000594:3fceafe0-6252-46a1-bc64-0c00c932fa04", "row_index": 594, "timestamp": "2019-05-15T11:47:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fceafe0-6252-46a1-bc64-0c00c932fa04", "eventTime": "2019-05-15T11:47:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMK3pYTVdXNFE5RHAwaWc2eTQvMzl6RXh6U041T1NxUlBmVWx6cGg3cEpDdzNLNkJBYnJaU3ptaGFNVlZiaHp5eUVncnkzQ2hSamJUa2V0WnZ2OTJqZktyLzZvSisrVTdGa1BHcjlLRSs2bmZoQU9SOWVIZFVNbTNvUVZPajIrcjV2QzFGbnNKYlBaYUoyWEs0d1JUcEtEWnZqeHpTZUp4T3lObDFEdjNxenp5MUxhTmxTRytaY2FvN1g3V0xhOGFDRXlSeThSMC9wWTVVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca5bcb4e-d181-4754-933a-7151ad49ff4c", "record_id": "flaws_cloudtrail:0000595:ca5bcb4e-d181-4754-933a-7151ad49ff4c", "row_index": 595, "timestamp": "2019-05-15T11:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca5bcb4e-d181-4754-933a-7151ad49ff4c", "eventTime": "2019-05-15T11:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPM3ljWkhPcURCYXRZK0hWdjRieDN1TGdnOGg4SnVGU0w3MjhmbHJ4YXJ0aTFkSjI4R1h2WlBneDNvK28rY2F6VE1EeDNoNmV0ZUhzM3A5YWNZNzlxd0psbXU5TjFJN2Radkt1Y1lUUU1mWE55QWJxd2JITVVFRExoSlplcjIzWmgxOGU3TENvVzVHVFBJcm1ZbXhycWh0dmtvYmh6OU1xRWZYUTB6dVdUZFhidGFmcFZjSDhxSHFOMkRzdURqKzd6Yzk3NGdEcytsZnNCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca5bcb4e-d181-4754-933a-7151ad49ff4c", "record_id": "flaws_cloudtrail:0000596:ca5bcb4e-d181-4754-933a-7151ad49ff4c", "row_index": 596, "timestamp": "2019-05-15T11:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca5bcb4e-d181-4754-933a-7151ad49ff4c", "eventTime": "2019-05-15T11:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPM3ljWkhPcURCYXRZK0hWdjRieDN1TGdnOGg4SnVGU0w3MjhmbHJ4YXJ0aTFkSjI4R1h2WlBneDNvK28rY2F6VE1EeDNoNmV0ZUhzM3A5YWNZNzlxd0psbXU5TjFJN2Radkt1Y1lUUU1mWE55QWJxd2JITVVFRExoSlplcjIzWmgxOGU3TENvVzVHVFBJcm1ZbXhycWh0dmtvYmh6OU1xRWZYUTB6dVdUZFhidGFmcFZjSDhxSHFOMkRzdURqKzd6Yzk3NGdEcytsZnNCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b91faea-4848-4975-aea7-ec33b8e0d0b1", "record_id": "flaws_cloudtrail:0000597:5b91faea-4848-4975-aea7-ec33b8e0d0b1", "row_index": 597, "timestamp": "2019-05-15T11:47:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b91faea-4848-4975-aea7-ec33b8e0d0b1", "eventTime": "2019-05-15T11:47:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBVDB1UE9jZ3FBdWJHR1hQVW1zdjdycTdLMXJhMitRRnNReUFPOWZIRXVZcWlhbWJnSVpRYjZYUW56UEpDUk0ySDlKVzZUUW5JakF0TWxmakxRRUo0RmRkMXB2YTZwNU5IazdJMzlldWJqWHQ3UEFNY0FwYTJJTWdmUmcreXhkM1RFUThDUkQvQkF6V09pY25kOGMwcGpJcElySThXWnBsVkM5cnNTd0hXa3dkSUdNdUtadlpDaml1b05JZjBnU1d6aHBjMEpNek5nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b91faea-4848-4975-aea7-ec33b8e0d0b1", "record_id": "flaws_cloudtrail:0000598:5b91faea-4848-4975-aea7-ec33b8e0d0b1", "row_index": 598, "timestamp": "2019-05-15T11:47:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b91faea-4848-4975-aea7-ec33b8e0d0b1", "eventTime": "2019-05-15T11:47:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBVDB1UE9jZ3FBdWJHR1hQVW1zdjdycTdLMXJhMitRRnNReUFPOWZIRXVZcWlhbWJnSVpRYjZYUW56UEpDUk0ySDlKVzZUUW5JakF0TWxmakxRRUo0RmRkMXB2YTZwNU5IazdJMzlldWJqWHQ3UEFNY0FwYTJJTWdmUmcreXhkM1RFUThDUkQvQkF6V09pY25kOGMwcGpJcElySThXWnBsVkM5cnNTd0hXa3dkSUdNdUtadlpDaml1b05JZjBnU1d6aHBjMEpNek5nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbbe06fb-6641-4e89-b8b4-58328c6c5c4", "record_id": "flaws_cloudtrail:0000599:bbbe06fb-6641-4e89-b8b4-58328c6c5c4", "row_index": 599, "timestamp": "2019-05-15T11:47:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbbe06fb-6641-4e89-b8b4-58328c6c5c4", "eventTime": "2019-05-15T11:47:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Z1ROMnozS0xnVnNKRUxuRGZvd3J4N09hR1U4SlFzdldZejU5UFJPMWorZHpYSXh2U2Y0WHVUeFZsdmlPbzNtVndTSGJBQlJHNVh2UnMrQy9UcE1qWTVnMlR6cHRZWldKVWxXTWhVRTN4cm11RVdzUzEvcG5UelAwWjZOTjd5Znh5STNBSzd0SWZGYnQ5amkzWU52Rkh5Ny9VdzMwbVpRdEpqWlVaM0NlWkhuSkFsTjI3b05LMkphRHBjZGwvQmFCRE1zR0ZzVjJUVzNPZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbbe06fb-6641-4e89-b8b4-58328c6c5c4", "record_id": "flaws_cloudtrail:0000600:bbbe06fb-6641-4e89-b8b4-58328c6c5c4", "row_index": 600, "timestamp": "2019-05-15T11:47:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbbe06fb-6641-4e89-b8b4-58328c6c5c4", "eventTime": "2019-05-15T11:47:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4Z1ROMnozS0xnVnNKRUxuRGZvd3J4N09hR1U4SlFzdldZejU5UFJPMWorZHpYSXh2U2Y0WHVUeFZsdmlPbzNtVndTSGJBQlJHNVh2UnMrQy9UcE1qWTVnMlR6cHRZWldKVWxXTWhVRTN4cm11RVdzUzEvcG5UelAwWjZOTjd5Znh5STNBSzd0SWZGYnQ5amkzWU52Rkh5Ny9VdzMwbVpRdEpqWlVaM0NlWkhuSkFsTjI3b05LMkphRHBjZGwvQmFCRE1zR0ZzVjJUVzNPZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3063f62e-86d9-499d-bfdb-7ac806f70d41", "record_id": "flaws_cloudtrail:0000601:3063f62e-86d9-499d-bfdb-7ac806f70d41", "row_index": 601, "timestamp": "2019-05-15T11:47:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3063f62e-86d9-499d-bfdb-7ac806f70d41", "eventTime": "2019-05-15T11:47:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaldJa2pwS1lZalQyMHluUDZ1V01vbzJ0dEhITDBnWVluUm5UNElvQ3BSakNQZWZSeUxIeklBQVVoU0Jta0x2REp4Mzg4Y1M5K1RrMWd6N1JjWXVPZlZKa2J2bnhxTTQzbVhYeEdINWJtR0tMSlRnK0xwNkVXVW8vazhsVHJTanU5b2MxTXpmTi80K092TEQwUjBxM09WSUlEYmR3ckxZZnVzTHBkS2dONXVmTHR6ditsUDB4WGgrd3padXpMUjAxdEU4T2x2aW9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3063f62e-86d9-499d-bfdb-7ac806f70d41", "record_id": "flaws_cloudtrail:0000602:3063f62e-86d9-499d-bfdb-7ac806f70d41", "row_index": 602, "timestamp": "2019-05-15T11:47:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3063f62e-86d9-499d-bfdb-7ac806f70d41", "eventTime": "2019-05-15T11:47:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIaldJa2pwS1lZalQyMHluUDZ1V01vbzJ0dEhITDBnWVluUm5UNElvQ3BSakNQZWZSeUxIeklBQVVoU0Jta0x2REp4Mzg4Y1M5K1RrMWd6N1JjWXVPZlZKa2J2bnhxTTQzbVhYeEdINWJtR0tMSlRnK0xwNkVXVW8vazhsVHJTanU5b2MxTXpmTi80K092TEQwUjBxM09WSUlEYmR3ckxZZnVzTHBkS2dONXVmTHR6ditsUDB4WGgrd3padXpMUjAxdEU4T2x2aW9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f58f862-9961-45ee-bb3a-f613956e90a4", "record_id": "flaws_cloudtrail:0000603:7f58f862-9961-45ee-bb3a-f613956e90a4", "row_index": 603, "timestamp": "2019-05-15T11:47:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f58f862-9961-45ee-bb3a-f613956e90a4", "eventTime": "2019-05-15T11:47:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEbEFkV2k3b1pTWDZqZnRnSVB0a1ROQ2dIV2NuaVNGUHpWWTBmditzaGNaNWNud2o5U2UxZTNaZnFLeG0vWFlIdHIxdkMzYXBnL01uSEcrZTlSVEhPbHZMaFNKYlgzbnB6QXQ4aTJiNSt0RDlXRHV1NzMxdGlYYy9DcjhISWFFcS81TU9UUnc5dlkxSHRPS0FXQlJkZC9ZRjQxWG00MTlMQVJ2NEtHQlIrTVZxVFNPK04reTBXTTlPV1UybkdqMjJic3p0YUUrUjk4az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f58f862-9961-45ee-bb3a-f613956e90a4", "record_id": "flaws_cloudtrail:0000604:7f58f862-9961-45ee-bb3a-f613956e90a4", "row_index": 604, "timestamp": "2019-05-15T11:47:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f58f862-9961-45ee-bb3a-f613956e90a4", "eventTime": "2019-05-15T11:47:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEbEFkV2k3b1pTWDZqZnRnSVB0a1ROQ2dIV2NuaVNGUHpWWTBmditzaGNaNWNud2o5U2UxZTNaZnFLeG0vWFlIdHIxdkMzYXBnL01uSEcrZTlSVEhPbHZMaFNKYlgzbnB6QXQ4aTJiNSt0RDlXRHV1NzMxdGlYYy9DcjhISWFFcS81TU9UUnc5dlkxSHRPS0FXQlJkZC9ZRjQxWG00MTlMQVJ2NEtHQlIrTVZxVFNPK04reTBXTTlPV1UybkdqMjJic3p0YUUrUjk4az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76c272994-6839-402a-8414-9cb1ccd4122d", "record_id": "flaws_cloudtrail:0000605:76c272994-6839-402a-8414-9cb1ccd4122d", "row_index": 605, "timestamp": "2019-05-15T11:47:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "8.210.235.176", "user_agent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76c272994-6839-402a-8414-9cb1ccd4122d", "eventTime": "2019-05-15T11:47:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.210.235.176", "userAgent": "aws-cli/1.15.68 Python/2.7.10 Darwin/18.5.0 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlRUpTU1VxWGJaMWtYemxkV1MrTVVlemNCaFFpWnQxekZ3WUFUUjRaMEl2NUtwcDlqRTBwcG1jZCtVYzQ5UHFiVGhsc2xjK0pCRFkycnJxamk2SlpiUkhyS202OGdrVGtUNDV2ZGJpR0VuNTRycmlTL1ViV3RQYXpPNHRMOFNLR245T3NtS2xtVGZhVWFXMDl6LzJMaXk5Vi9MZVVIRDNKQk1IMWpyS0ZHZzhmUHY4OUx2bmNJSnJyNjh4OU83bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}